Maurosoria vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Maurosoria products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2021-47901 Critical · 9.8 CWE-1236 Jan 27, 2026

Dirsearch CSV Injection via --csv-report (CVE-2021-47901)

Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craft malicious server redirects with comma-separated paths containing Excel formulas to manipulate the generated CSV report.