CVE-2024-28111

CVE-2024-28111 is a CSV Injection vulnerability affecting Thinkst Canarytokens, specifically within the incident history export function of Canarytokens.org. An attacker who discovers an HTTP-based Canarytoken could exploit this flaw to target the token's owner, leading to potential code execution if the owner exports the incident history to CSV and opens it in a vulnerable application like Microsoft Excel. The vulnerability has a CVSS score of 6.5 (Medium) due to its network-based attack vector and required user interaction, with a high impact on confidentiality. While there is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion, indicating awareness.