CVE-2022-2112

CVE-2022-2112 is a high-severity vulnerability affecting InvenTree versions prior to 0.7.2, stemming from improper neutralization of formula elements within CSV files. This allows an unauthenticated attacker to achieve high impact on confidentiality, integrity, and availability through a low-complexity network attack requiring user interaction. While the CVSS score is 8.8, there is currently no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low immediate threat.