Questions tagged [csv]
comma-separated-value is a basic file format for storing row-column type data. Use this tag for security issues relating to the format itself, or where the fact that the data is csv-formatted is core to the question.
0
votes
1answer
113 views
Can ClamAV detect CSV Injection?
I'm allowing users to upload CSV files. Other users can download these files. I'm aware that CSV could be an attack vector.
Would a ClamAV (or other AV) scan offer protection against such a file?
...
1
vote
2answers
62 views
File upload attack vectors when file is not saved to disk
I'm curious to know if there are any significant threats presented by files which are uploaded and read but are never saved to disk? I've read countless articles about file uploads regarding storage ...
0
votes
2answers
103 views
What are some examples of injection attacks into databases that abuse common programs besides SQL?
Most data validation deals with SQL injection attacks. My question is, what other types of injection types are there that use common programs, and what are good defenses against them?
0
votes
1answer
2k views
Preventing dangerous CSV Formula Injection
I have a form that takes user input and records them in a table. My form sanitizes user input by deleting certain characters (mentioned below). I can export a CSV of the table, which outputs the cells ...
7
votes
2answers
4k views
Can a CSV contain malicious code?
I am working with a system that allows users to upload CSV files, that are downloaded by other users.
The system validates (amongst other things) that all CSV files can be parsed by an RFC 4180 ...
