CVE-2025-1421

Data provided in a request performed to the server while activating a new device are put in a database.Other high privileged users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC.


This issue has been fixed in2.17.5 version ofKonsola Proget (server part of the MDM suite).