← All advisories

High severity7.8NVD Advisory· Published Jun 23, 2023· Updated Jun 17, 2026

CVE-2023-3302

CVE-2023-3302

Description

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
admidio/admidioPackagist	< 4.2.9	4.2.9

Affected products

3

Admidio/Admidio2 versions
cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*range: <4.2.9
- (no CPE)range: unspecified
ghsa-coords
pkg:composer/admidio/admidio
Range: < 4.2.9

Patches

Vulnerability mechanics

References

4

github.com/admidio/admidio/commit/c87a7074a1a73c4851263060afd76aa4d5b6415fnvdPatchWEB
huntr.dev/bounties/5e18619f-8379-464a-aad2-65883bb4e81anvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-hm75-8w6h-4f8fghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-3302ghsaADVISORY

News mentions

0

No linked articles in our index yet.