Security Advisory

CVE-2025-66834

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-30 00:00:00
Last updated 2026-01-02 15:10:39
Assigner mitre
State PUBLISHED

Description

A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name.