Vulnerability Details CVE-2021-27839
A CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be exploited by users to perform malicious actions such as redirecting admins to unknown or harmful websites, or disclosing other clients' details that the user did not have access to.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.1%
CVSS Severity
CVSS v3 Score 4.4
CVSS v2 Score 5.8
References
Products affected by CVE-2021-27839
-
cpe:2.3:a:bigprof:online_invoicing_system:2.3
-
cpe:2.3:a:bigprof:online_invoicing_system:2.4
-
cpe:2.3:a:bigprof:online_invoicing_system:2.5
-
cpe:2.3:a:bigprof:online_invoicing_system:2.6
-
cpe:2.3:a:bigprof:online_invoicing_system:2.7
-
cpe:2.3:a:bigprof:online_invoicing_system:2.9
-
cpe:2.3:a:bigprof:online_invoicing_system:3.0
-
cpe:2.3:a:bigprof:online_invoicing_system:3.1
-
cpe:2.3:a:bigprof:online_invoicing_system:4.0
-
cpe:2.3:a:bigprof:online_invoicing_system:4.1
-
cpe:2.3:a:bigprof:online_invoicing_system:4.2
-
cpe:2.3:a:bigprof:online_invoicing_system:4.3