CVE-2024-28111

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-based Canarytoken to target the Canarytoken's owner, if the owner exports the incident history to CSV and opens in a reader application such as Microsoft Excel. The impact is that this issue could lead to code execution on the machine on which the CSV file is opened. Version sha-c595a1f8 contains a fix for this issue.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-1236

Affected software

No affected versions have been published.

Timeline

Published
Mar 6, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-281124.8Peering Manager is a BGP session management tool. Affected versions of Peering Manager are subject to a potential stored Cross-Site ScriptinCVE-2024-281136.1Peering Manager is a BGP session management tool. In Peering Manager <=1.8.2, it is possible to redirect users to an arbitrary page using a CVE-2024-281149.1Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code ExecutioCVE-2024-281157.8FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against lCVE-2024-281168.8Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-Side Template InjectCVE-2024-281178.8Grav is an open-source, flat-file content management system. Prior to version 1.7.45, Grav validates accessible functions through the Utils:CVE-2024-281188.8Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to twig extension classCVE-2024-281198.8Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to twig extension classCVE-2024-28128.8A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classified as critical. This affects the function formWriteFCVE-2024-281207.5codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesnCVE-2024-281218.8stimulus_reflex is a system to extend the capabilities of both Rails and Stimulus by intercepting user interactions and passing them to RailCVE-2024-281226.8JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. This vulnerability allows an attacker