PT-2025-32992 · Unknown · Cyclonedx Sunshine

CVE-2025-52386

Publicado

2025-08-13

Atualizado

2025-08-13

CVSS v3.1

5.4

Média

Vetor

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: CycloneDX Sunshine version 0.9

Description: CycloneDX Sunshine version 0.9 is vulnerable to CSV Formula Injection via a crafted JSON file.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2025-52386

Cyclonedx Sunshine