CVE-2019-14352 - CVE House
Back to Database
Status published High CVE-2019-14352

In Joget Workflow 6.0.20, CSV Injection, also known as Formula...

Vulnerability Description

In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_userview_sales/_/account_new with the Account ID or Account Name field. NOTE: the vendor disputes the relevance of this finding because CSV is not the intended export format for spreadsheet applications

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-14352

Credits & Attribution

No credits recorded in the NVD database.

References

More from joget

View All →
CVE-2022-26197
Joget DX 7 was discovered to contain a cross-site scripting...
Medium 5.4

Affected Vendor

Affected Software

worfklow
Vulnerable Versions:
6.0.20

Timeline

Official Publish: July 28th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.