CVE Intelligence

Guelfoweb Knockpy vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Guelfoweb Knockpy: 1 record(s), with affected versions and fixes.
cpe:2.3:a:guelfoweb:knockpy

CVE-2020-36941 Critical · 9.8 CWE-1236 Jan 27, 2026
Knockpy 4.1.1 - CSV Injection
Knockpy 4.1.1 contains a CSV injection vulnerability that allows attackers to inject malicious formulas into CSV reports through unfiltered server headers. Attackers can manipulate server response headers to include spreadsheet formulas that will execute when the CSV is opened in spreadsheet applications.