CVE-2021-41824
1 advisory.
Packagist/craftcms/cms CVE-2021-41824: high 8.8, EPSS 1.37%
CSV Injection Vulnerability
Action: Upgrade craftcms/cms to 3.7.14 or later.
composer require craftcms/cms:3.7.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.4.0 | 3.7.14 | - |
Fixed versions
| 3.7.14 |
Sources
- osv: GHSA-h7vq-5qgw-jwwq
- https://github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq
- https://nvd.nist.gov/vuln/detail/CVE-2021-41824
- https://github.com/craftcms/cms/commit/c9cb2225f1b908fb1e8401d401219228634b26b2
- https://github.com/craftcms/cms
- https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28
- https://twitter.com/craftcmsupdates/status/1442928690145366018
CVE-2021-41824 · published · modified · JSON