CVE-2021-43257 is a vulnerability in MantisBT
Published on April 14, 2022
Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csv_export.php generated CSV file in Excel.
Products Associated with CVE-2021-43257
Want to know whenever a new CVE is published for MantisBT? stack.watch will email you.
Exploit Probability
EPSS
0.89%
Percentile
54.63%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.