Security BugCrowd CSV Injection April 4, 2016 007admin Leave a comment BugCrowd’s file upload allows for CSVs that may have malicious formulas in them.