CVE-2020-28845

A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious payload in admin's portal thus leads to compromise admin's system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
VendorProductVersion
netskopenetskope
75.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://the-it-wonders.blogspot.com/2020/11/netskope-csv-injection-in-admin-ui.html
http://the-it-wonders.blogspot.com/2020/11/netskope-csv-injection-in-admin-ui.html