domains / families / security / csv-formula-injection

csv-formula-injection

separate

CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT*). Use when exports, imports, or user fields feed spreadsheets or reporting tools.

When to use

• CSV/spreadsheet formula injection
• DDE injection in Excel/LibreOffice
• Google Sheets IMPORT* functions
• Formula obfuscation techniques
• Testing CSV exports for formula evaluation
• Safe testing methodology for spreadsheet injection

When not to use

• Targeting end users without program rules
• Unauthorized payloads invoking local commands or remote fetches

Skill page

Source