CVE-2023-2258

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1236

Affected software

VendorProductVersions
alfio-eventalfio-event/alf.io>= unspecified, < 2.0-M4-2304

References

Timeline

Published
Apr 24, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-225807.5Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.CVE-2023-225819.8White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the webCVE-2023-225826.1The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting.CVE-2023-225839.8The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.CVE-2023-225847.5The Danfoss AK-EM100 stores login credentials in cleartext.CVE-2023-225856.1The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.CVE-2023-225867.5The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.CVE-2023-22597.2Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.CVE-2023-225913.2IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to CVE-2023-225927.8IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.4 could allow a local user to perform unauthorized actions due to insufficiCVE-2023-225937.8IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to security misconfiguration ofCVE-2023-225945.4IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users t
CVE-2023-2258: High severity, CVSS 8.8 | Vulnix