CVE-2020-10780 Other in CloudForms
Attackers can inject malicious formulas into CSV exports, leading to code execution when victims open the file in Excel.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-10780?
CVE-2020-10780 is a medium-severity vulnerability in CloudForms, published on 11 Aug 2020. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as CSV and opens the file with Excel. Once the victim opens the file, the formula executes, triggering any number of possible events. While this is strictly not an flaw that affects the application directly, attackers could use the loosely validated parameters to trigger several attack possibilities.
Weakness: CWE-1236
Which versions are affected by CVE-2020-10780?
It affects 1 product.
Products include Redhat Cloudforms Management Engine.
How do I fix CVE-2020-10780?
Apply the vendor's patch.
Is CVE-2020-10780 being exploited?
There is no known exploitation of CVE-2020-10780 in the wild and no public exploit code.