GHSA-3428-vpwf-2w42MediumCVSS 5.4
CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject...
🔗 CVE IDs covered (1)
📋 Description
CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client name parameter which can be triggered and executed in a different user session upon exporting to CSV format.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2024-28328
- https://github.com/ShravanSinghRathore/ASUS-RT-N300-B1/wiki/CSV-Injection-CVE%E2%80%902024%E2%80%9028328
- http://asus.com
- https://redfoxsec.com/blog/asus-rt-n12-b1s-csv-injection-cve%E2%80%902024%E2%80%9028328
- https://github.com/advisories/GHSA-3428-vpwf-2w42