Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csv_export.php generated CSV file in Excel.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| mantisbt/mantisbt(Packagist) | 0 | 2.25.3 | N/A |
CVSS Metrics
