CVE-2020-15255

Published October 16th, 2020

View on NVD ↗

CVSS v3

8.7

HIGH

CVSS v2

MEDIUM

Affected

PROJECT

Description

In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as formulas by spreadsheet software (for example, when a cell value starts with an equal sign). This is fixed in version 1.19.23.5325.

anuko/timetracker

Simple, easy to use, open source time tracking system.

GitHub

207