Vulnerabilities

TI-2023-03261 CVE-2023-3493 · GHSA-89x9-gx7c-5q2m

Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling

HIGH 70

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00526 Published 2023-06-30 Fixed in 0.5.3 CWE-1236

TI-2023-03259 CVE-2023-3491 · GHSA-99qp-9hmr-6jgh

HIGH 73

Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00889 Published 2023-06-30 Fixed in 0.5.3 CWE-434

TI-2023-03258 CVE-2023-3490 · GHSA-fx9p-2h37-fpg7

HIGH 82

SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00922 Published 2023-06-30 Fixed in 0.5.3 CWE-89