CVE-2021-43257

Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csv_export.php generated CSV file in Excel.

• CWE-1236

• https://github.com/mantisbt/mantisbt/commit/7f4534c723e3162b8784aebda4836324041dbc3ePatch, Third Party Advisory
• https://www.mantisbt.org/bugs/view.php?id=29130Exploit, Issue Tracking, Patch, Vendor Advisory
• https://github.com/mantisbt/mantisbt/commit/7f4534c723e3162b8784aebda4836324041dbc3ePatch, Third Party Advisory
• https://www.mantisbt.org/bugs/view.php?id=29130Exploit, Issue Tracking, Patch, Vendor Advisory

Published

Apr 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43246Windows Hyper-V Denial of Service Vulnerability5.6
• CVE-2021-43247Windows TCP/IP Driver Elevation of Privilege Vulnerability7.8
• CVE-2021-43248Windows Digital Media Receiver Elevation of Privilege Vulner…7.8
• CVE-2021-4325A vulnerability, which was classified as problematic, has be…6.1
• CVE-2021-43255Microsoft Office Trust Center Spoofing Vulnerability5.5
• CVE-2021-43256Microsoft Excel Remote Code Execution Vulnerability7.8
• CVE-2021-43258CartView.php in ChurchInfo 1.3.0 allows attackers to achieve…8.8
• CVE-2021-4326A vulnerability in Imperative framework which allows already…7.8
• CVE-2021-43264In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adj…3.3
• CVE-2021-43265In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, cer…5.4
• CVE-2021-43266In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exp…7.3
• CVE-2021-43267An issue was discovered in net/tipc/crypto.c in the Linux ke…9.8