CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows attackers to obtain sensitive information via the User Name field.
References
| Link | Resource |
|---|---|
| https://herolab.usd.de/en/security-advisories/usd-2022-0054/ | Third Party Advisory |
Configurations
History
27 Aug 2024, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 |
04 Jan 2024, 23:43
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:sesami:cash_point_\&_transport_optimizer:6.3.8.6.718:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CWE | CWE-1236 | |
| References | () https://herolab.usd.de/en/security-advisories/usd-2022-0054/ - Third Party Advisory |
29 Dec 2023, 13:56
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-29 04:15
Updated : 2024-08-27 19:35
NVD link : CVE-2023-31296
Mitre link : CVE-2023-31296
CVE.ORG link : CVE-2023-31296
JSON object : View
Products Affected
sesami
- cash_point_\&_transport_optimizer