CVE-2025-35033

Publication date

2025-09-29 20:01:38

Family

cisa-cg

State

PUBLISHED

Description

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14.