137
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 137 Data Neutralization Issues 2311
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Other (Prevalence = Undetermined)
Alternate Terms
CSV Injection :
Formula Injection :
Excel Macro Injection :
Common Consequences
Scope Impact Likelihood
Confidentiality Read Application Data
Execute Unauthorized Code or Commands
Current versions of Excel warn users of untrusted content.
Low
Potential Mitigations
Phase: Implementation
CWE Version 4.14
CWE-1236: Improper Neutralization of Formula Elements in a CSV File
CWE-1236: Improper Neutralization of Formula Elements in a CSV File