PT-2023-25199
CVE-2023-3527
·
تاريخ النشر
2023-07-18
·
تاريخ التحديث
2023-07-29
الوصف من
CVSS 3.1
6.8
متوسطةالمقاييسAV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Avaya Call Management System (CMS) Supervisor (affected versions not specified)
Description
A CSV injection issue was found in the Avaya Call Management System (CMS) Supervisor web application, allowing a user with administrative privileges to input crafted data. When this data is exported to a CSV file and opened by a spreadsheet software such as Microsoft Excel, it may attempt arbitrary command execution on the system.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾