CVE Feed

    Dashboard / CVE / CVE-2024-28111

    CVE-2024-28111

    Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-based Canarytoken to target the Canarytoken's owner, if the owner exports the incident history to CSV and opens in a reader application such as Microsoft Excel. The impact is that this issue could lead to code execution on the machine on which the CSV file is opened. Version sha-c595a1f8 contains a fix for this issue.

    Published:Mar 6, 2024
    Last Modified:Dec 5, 2025
    EPS:Mar 6, 2024
    EPSS Score:0.00157
    CVSS Score:6.5

    Affected Products

    Vendor
    Thinkst
    Product
    Canarytokens

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-28355 (CVSS 1.3) — Canarytokens help track activity and actions on a network. Versions prior to `sha-7ff0e12` have a Self Cross-S…
    CVE-2024-41664 (CVSS 5.4) — Canarytokens help track activity and actions on a network. Prior to `sha-8ea5315`, Canarytokens.org was vulner…
    CVE-2024-41663 (CVSS 3.5) — Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identifie…
    CVE-2023-22475 (CVSS 6.3) — Canarytokens is an open source tool which helps track activity and actions on your network. A Cross-Site Scrip…
    CVE-2022-31113 (CVSS 6.3) — Canarytokens is an open source tool which helps track activity and actions on your network. A Cross-Site Scrip…
    CVE-2019-9768 (CVSS 7.5) — Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High