CVE | CVE-2024-28328 |
CVE Title | |
Published Date | 2024-04-26T15:15Z |
Modified Date | 2024-04-26T15:32Z |
Description | CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client name parameter which can be triggered and executed in a different user session upon exporting to CSV format. |
References | |
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites. | |
Reference URL | http://asus.com |
Reference Description | http://asus.com |
Reference URL | https://github.com/ShravanSinghRathore/ASUS-RT-N300-B1/wiki/CSV-Injection-CVE%E2%80%902024%E2%80%9028328 |
Reference Description | https://github.com/ShravanSinghRathore/ASUS-RT-N300-B1/wiki/CSV-Injection-CVE%E2%80%902024%E2%80%9028328 |
Sources | NIST MITRE |
Note
- No CVSS data for this CVE