CVE-2023-48029

2023-11-1700:00:00

mitre

www.cve.org

corebos

csv injection

user management

administrator

malicious payload

vulnerability

exploitation

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.6%

JSON

Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious payload on the administrator’s computer.