CVE-2023-45597
EUVD-2023-4988905.03.2024, 12:15
A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functionality of the web application (concerning the function “export_file”) allows a remote authenticated attacker to inject arbitrary formulas inside generated CSV files. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ailux | imx6 | 𝑥 < 1.0.7-2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| ailux | imx6_bundle | 𝑥 < 1.0.7-2 | ADP |