CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2021-43257
High (7.8) in mantisbt mantisbt. EPSS 1.0% chance of exploitation in the next 30 days.
Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csv_export.php generated CSV file in Excel.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-11-01)
- CWE
- CWE-1236
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mantisbt:mantisbt