CVE-2023-31295

2023-12-2900:00:00

mitre

www.cve.org

vulnerability

csv injection

sesami cpto

version 6.3.8.6

remote attackers

sensitive information

user profile field

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.3%

JSON

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the User Profile field.

References

herolab.usd.de/en/security-advisories/usd-2022-0053/