Description (CNA)
The Spreadsheet view is vulnerable to a XSS attack, where a remote unauthorised attacker can read a limited amount of values or DoS the affected spreadsheet. Disclosure of secrets or other system settings is not affected as well as other spreadsheets still work as expected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AREAL SAS / Topkapi Vision Webserv2 | affected 1.0.0 through 6.2.5474 |
CWE
CWE-79
References
- https://www.areal-topkapi.com/en/topkapi/security-bulletins
- https://www.areal-topkapi.com/topkapi/bulletins-de-securite
ADP enrichment
No English description supplied.
No references supplied.