Skip to content
Server-Side Spreadsheet Injection - Formula Injection to Remote Code Execution
bishopfox.com | vulnerability | #rce | #appsec | #data-exfiltration | #csv-injection | #formula-injection | #google-sheets
Summary
Jake Miller details server-side spreadsheet injection: formula payloads exfiltrated data from a Google Sheets workflow, and in two apps led to remote code execution.
- Published
- Collected