Lucene search
MitreCVELIST:CVE-2023-25348HistoryApr 25, 2023 - 12:00 a.m.
CVE-2023-25348
2023-04-2500:00:00
mitre
www.cve.org
churchcrm 4.5.3
csv injection
input fields
creating new person
arbitrary code execution
crafted excel file
vulnerability
0.001 Low
EPSS
Percentile
25.9%
ChurchCRM 4.5.3 was discovered to contain a CSV injection vulnerability via the Last Name and First Name input fields when creating a new person. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.
Related
osv
osv
CVE-2023-25348
2023-04-25 13:15:09
cve
cve
CVE-2023-25348
2023-04-25 13:15:09
nvd
nvd
CVE-2023-25348
2023-04-25 13:15:09
prion
prion
Design/Logic Flaw
2023-04-25 13:15:00
cnvd
cnvd
ChurchCRM CSV Injection Vulnerability
2023-04-28 00:00:00