Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Joget Subscribe
Filtered by product Worfklow
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-14352 1 Joget 1 Worfklow 2020-08-24 6.8 MEDIUM 7.8 HIGH
** DISPUTED ** In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_userview_sales/_/account_new with the Account ID or Account Name field. NOTE: the vendor disputes the relevance of this finding because CSV is not the intended export format for spreadsheet applications.