{"id":"GHSA-hm75-8w6h-4f8f","aliases":["CVE-2023-3302"],"title":"Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"Admidio prior to 4.2.9 is vulnerable toImproper Neutralization of Formula Elements in a CSV File.","severity":"high","score":7.3,"published":"2023-06-23T15:30:43.000Z","modified":"2024-02-16T08:14:29.612Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"admidio/admidio","sources":[{"name":"OSV · GHSA-hm75-8w6h-4f8f","url":"https://osv.dev/vulnerability/GHSA-hm75-8w6h-4f8f"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.2.9"}],"type":"ECOSYSTEM"}],"versions":["4.1.0","4.1.3","v4.2-Beta.1","v4.2-Beta.2","v4.2-Beta.3","v4.2.0","v4.2.1","v4.2.2","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8"],"fixed":["4.2.9"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2023-3302","https://github.com/admidio/admidio/commit/c87a7074a1a73c4851263060afd76aa4d5b6415f","https://github.com/admidio/admidio","https://huntr.dev/bounties/5e18619f-8379-464a-aad2-65883bb4e81a"],"sources":[{"name":"OSV","id":"GHSA-hm75-8w6h-4f8f","modified":"2024-02-16T08:14:29.612451Z","url":"https://osv.dev/vulnerability/GHSA-hm75-8w6h-4f8f"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","score":7.3}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T15:50:37.681Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}