CVE-2021-27020 Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export

Description

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.

Affected products and versions

Product	Affected versions	Fixed in
Puppet Enterprise	Versions not published

Other CVEs of Puppet Enterprise

The 4 CVEs of Puppet Enterprise →

CVE-2021-27022 A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive… Not rated CVE-2020-7943 Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints Not rated CVE-2019-10694 The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the… Not rated