CVE-2020-13247: Boolebox

High severity, CVSS 7.3. EPSS: 1% chance of exploitation in the next 30 days.

BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area.

Affected products

• Boolebox Boolebox: before 4.2.3.0 (fixed in 4.2.3.0)

Published 2020-06-24. Last modified 2026-06-17.