Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.1

Dirsearch: Malicious Server Redirects Can Manipulate Output

CVE-2021-47901 · published 9 months ago
Summary

A security issue in Dirsearch 0.4.1 allows attackers to manipulate the tool's output by crafting malicious server redirects. This can happen when using the --csv-report flag to generate a CSV report. Update to a fixed version to prevent this security risk.

Original advisory text
Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craft malicious server r...
Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craft malicious server redirects with comma-separated paths containing Excel formulas to manipulate the generated CSV report.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
5.1 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-1236Improper Neutralization of Formula Elements in a CSV File
Timeline
Published27 Jan 2026
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2021-47901 · NVD
Track software like this
Free during beta