CVE-2023-3527

Name of the Vulnerable Software and Affected Versions Avaya Call Management System (CMS) Supervisor (affected versions not specified)

Description A CSV injection issue was found in the Avaya Call Management System (CMS) Supervisor web application, allowing a user with administrative privileges to input crafted data. When this data is exported to a CSV file and opened by a spreadsheet software such as Microsoft Excel, it may attempt arbitrary command execution on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.