Dell EMC CloudLink 7.1 and all prior versions contain a CSV formula Injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to arbitrary code execution on end user machine
References
Link | Resource |
---|---|
https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app | Patch Vendor Advisory |
Configurations
Information
Published : 2021-11-23 12:15
Updated : 2021-11-26 19:58
NVD link : CVE-2021-36334
Mitre link : CVE-2021-36334
JSON object : View
CWE
CWE-1236
Improper Neutralization of Formula Elements in a CSV File
Products Affected
dell
- emc_cloud_link