CSV-Safe improperly filters special characters potentially leading to CSV injection

심각 9.8CVE-2022-28481 · GHSA-f55g-x8qq-2569 · Published 01/05/2022 · updated 17/06/2026

요약

CVE-2022-28481은(는) csv-safe, csv-safe (csv-safe project)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.8%, 전체 취약점의 78.1%보다 높음.
조치: 3.0.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
csv-safe RubyGems	`< 3.0.0`	`3.0.0`
csv-safe csv-safe_project	`< 3.0.0`	`3.0.0`

CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection.

NVD description

CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.