Question 1

What is this vulnerability? (Essence + Consequences)

Accepted Answer

🚨 **Essence**: A CSV Injection flaw in **dirsearch** v0.4.1. When using the `--csv-report` flag, the tool mishandles redirect endpoints.…

Question 2

Root Cause? (CWE/Flaw)

Accepted Answer

🛡️ **Root Cause**: **CWE-1236** (Improper Neutralization of Elements for Custom Script/HTML in CSV).…

Question 3

Who is affected? (Versions/Components)

Accepted Answer

📦 **Affected**: **dirsearch** version **0.4.1**.
👤 **Vendor**: **Mauro Soria** (Personal Developer).
⚠️ **Scope**: Any user running this specific version with the `--csv-report` option is at risk.

Question 4

What can hackers do? (Privileges/Data)

Accepted Answer

💻 **Attacker Actions**:
1️⃣ **Code Execution**: Run arbitrary commands via Excel formulas (e.g., `=cmd|' /C calc'!A1`).
2️⃣ **Data Exfiltration**: Read local files or network resources.…

Question 5

Is exploitation threshold high? (Auth/Config)

Accepted Answer

🔓 **Threshold**: **LOW**.
🚫 **Auth**: No authentication required.
⚙️ **Config**: Requires only the `--csv-report` flag.…

Question 6

Is there a public Exp? (PoC/Wild Exploitation)

Accepted Answer

💣 **Public Exploit**: **YES**.
📂 **ExploitDB**: ID **49370**.
🔗 **Advisory**: VulnCheck has published details.…

Question 7

How to self-check? (Features/Scanning)

Accepted Answer

🔍 **Self-Check**:
1️⃣ Check your dirsearch version: `dirsearch --version`.
2️⃣ Look for usage of `--csv-report`.
3️⃣ Inspect generated CSV files for cells starting with `=`, `+`, `-`, or `@`.…

Question 8

Is it fixed officially? (Patch/Mitigation)

Accepted Answer

🛠️ **Official Fix**: **YES**.
📝 **Patch**: The issue is resolved in versions **post-0.4.1**.
✅ **Mitigation**: Update to the latest version from the [GitHub Repository](https://github.com/maurosoria/dirsearch).…

Question 9

What if no patch? (Workaround)

Accepted Answer

🚧 **No Patch Workaround**:
1️⃣ **Avoid CSV**: Do not use `--csv-report`. Use JSON or plain text logs instead.…

Question 10

Is it urgent? (Priority Suggestion)

Accepted Answer

🔥 **Urgency**: **HIGH**.
📅 **Priority**: Patch immediately.
💡 **Reason**: CVSS Score is **High** (9.8+ implied by vector). Easy to exploit, no auth needed, and affects security tools used by professionals.…

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2021-47901 — AI Deep Analysis Summary

Q1What is this vulnerability? (Essence + Consequences)

Q2Root Cause? (CWE/Flaw)

Q3Who is affected? (Versions/Components)

Q4What can hackers do? (Privileges/Data)

Q5Is exploitation threshold high? (Auth/Config)

Q6Is there a public Exp? (PoC/Wild Exploitation)

Q7How to self-check? (Features/Scanning)

Q8Is it fixed officially? (Patch/Mitigation)

Q9What if no patch? (Workaround)

Q10Is it urgent? (Priority Suggestion)

Continue exploring