CVE-2023-48029 | BDVDB-2026-217282 Detail

Description#

Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious payload on the administrator's computer.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-11-17Record published in the CVE List.
2. Version 22025-09-29Most recent update recorded in the CVE List.