CVEs-PoC/2020/CVE-2020-29023.md

CVE-2020-29023

Description

Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). This issue affects: Secomea GateManager all versions prior to 9.3.

POC

Reference

• https://www.secomea.com/support/cybersecurity-advisory/
• https://www.secomea.com/support/cybersecurity-advisory/#2418

Github

No PoCs found on GitHub currently.