Collected research

Comma Separated Vulnerabilities (archived original)

Comma Separated Vulnerabilities

James Kettle · Context Information Security · 29 August 2014

Examines the risks of exporting untrusted web application data to spreadsheets, where cells may be interpreted as formulas. The original 2014 article discusses trust boundaries, a disclosed spreadsheet vulnerability, user warnings and application-side mitigations.

Record

Document

Comma Separated Vulnerabilities

Researcher

James Kettle

Published by

Context Information Security

Date

29 August 2014

Topic

Other

In the archive

• Collected in the 2014 research round

Related sources

• Bugtraq: CVE-2014-3524: Apache OpenOffice Calc Command Injection Vulnerability

Tags

• injection
• mitigation
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of James Kettle, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 16 September 2026.