VulnSocial

CVE-2020-36941Disclosure(guelfoweb / knockpy)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Knockpy 4.1.1 contains a CSV injection vulnerability that allows attackers to inject malicious formulas into CSV reports through unfiltered server headers. Attackers can manipulate server response headers to include spreadsheet formulas that will execute when the CSV is opened in spreadsheet applications.

guelfoweb CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-1236

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • knockpy

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
guelfoweb
Products
knockpy

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-01-28: 1Technical Details · 2026-01-28: 101-28
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2020-36941: CRITICAL] Knockpy 4.1.1 discovered with a CSV injection vulnerability. Attackers can insert harmful formulas through server headers, potentially impacting CSV reports.#cve,CVE-2020-36941,#cybersecurity https://cvefind.com/CVE-2020-36941

    Post summary

    The post announces a critical CSV injection flaw in Knockpy 4.1.1 that allows attackers to inject harmful formulas via server headers, potentially compromising CSV reports.

    0000048
    584 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appguelfowebknockpy4.1.1--

Explore more

Back to dashboardguelfoweb CVEsknockpy vulnerabilities