Beveiligingsadvies

CVE-2018-25135

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-24 19:27:45

Laatst bijgewerkt 2025-12-24 20:26:41

Toegewezen door VulnCheck

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields. Attackers can craft payloads in fields like 'Name', 'Gender', or 'Position' to trigger Excel macro execution when importing user data.

← Alle CVE's bekijken Bekijk op cve.org ↗