Lucene search
PRIOn knowledge basePRION:CVE-2023-25348HistoryApr 25, 2023 - 1:15 p.m.
Design/Logic Flaw
2023-04-2513:15:00
PRIOn knowledge base
www.prio-n.com
7
churchcrm
csv injection
vulnerability
name input
arbitrary code
excel file
0.001 Low
EPSS
Percentile
25.9%
ChurchCRM 4.5.3 was discovered to contain a CSV injection vulnerability via the Last Name and First Name input fields when creating a new person. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.
Related
osv
osv
CVE-2023-25348
2023-04-25 13:15:09
cvelist
cvelist
CVE-2023-25348
2023-04-25 00:00:00
cve
cve
CVE-2023-25348
2023-04-25 13:15:09
nvd
nvd
CVE-2023-25348
2023-04-25 13:15:09
cnvd
cnvd
ChurchCRM CSV Injection Vulnerability
2023-04-28 00:00:00