CVE-2021-47901 — dirsearch 0.4.1 - CSV Injection
Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craf…
Published: 2026-01-27 · CVSS: 5.1 · CVSS 4.0
Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craft malicious server redirects with comma-separated paths containing Excel formulas to manipulate the generated CSV report.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7