CSV Injection Vulnerability in Kimai Timesheet Tool
CVE-2021-43515
7.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2021-43515?
A CSV Injection vulnerability exists in the Kimai timesheet application, where users can exploit the Description field while creating new timesheets. By inputting specially crafted payloads, it is possible to execute unintended commands when the data is exported to a CSV file. This risk underscores the importance of input validation and sanitization to prevent malicious code execution through exported files.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.