Improper Neutralization of Formula Elements in a CSV File

Properties

id: d3f:CWE-1236

name
Improper Neutralization of Formula Elements in a CSV File
definition
The product saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by a spreadsheet product.
synonyms
CSV Injection
synonyms
Formula Injection
synonyms
Excel Macro Injection
json

Neighbors

CWE-1236 has no direct neighbors in this release.

Inferred Relationships

This page is experimental and may change significantly in future releases.

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.