← Database

CVE-2021-40848

HIGH CVSS: 7.8 Published: 2021-11-03 Modified: 2026-06-17

Description

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection.

Affected Platforms

Mahara Mahara

Weakness Type

CWE-1236

References