Vulnerability Description
Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields. Attackers can craft payloads in fields like 'Name', 'Gender', or 'Position' to trigger Excel macro execution when importing user data.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://www.anviz.com
- https://www.exploit-db.com/exploits/45765
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5498.php
- https://www.exploit-db.com/exploits/45765
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5498.php
FAQ
What is CVE-2018-25135?
CVE-2018-25135 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields. Attackers can craft payload...
How severe is CVE-2018-25135?
CVE-2018-25135 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-25135?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.