CVE-2023-47022

Name of the Vulnerable Software and Affected Versions NCR Terminal Handler version 1.5.1

Description The issue allows an unprivileged user to edit the audit logs for any user, potentially leading to CSV injection. It also enables a remote attacker to execute arbitrary code via a crafted script to the payload parameter.

Recommendations For NCR Terminal Handler version 1.5.1, consider restricting access to the audit logs and limiting the ability to edit them until a patch is available. As a temporary workaround, avoid using the payload parameter in affected API endpoints until the issue is resolved.