CVE-2023-4006: Improper Neutralization of Formula Elements in a CSV File

July 31, 2023

Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16.

References

github.com/advisories/GHSA-2xvx-368h-qcmv
github.com/thorsten/phpmyfaq/commit/03946eca488724251eaed8d9d36fed92e6d8fd22
huntr.dev/bounties/36149a42-cbd5-445e-a371-e351c899b189
nvd.nist.gov/vuln/detail/CVE-2023-4006

Code Behaviors & Features

Detect and mitigate CVE-2023-4006 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →