CVE-2025-1434

The Spreadsheet view is vulnerable to a XSS attack, where a remote unauthorised attacker can read a limited amount of values or DoS the affected spreadsheet. Disclosure of secrets or other system settings is not affected as well as other spreadsheets still work as expected.

Score

CVSS 3.1 6.1 Medium

Status

Deferred - info@cert.vde.com

Published

2025-03-11

Last modified

2025-03-11

Weaknesses

CWE-79

Affected products

• Topkapi Vision Webserv2 (Areal Sas)

References

• https://www.areal-topkapi.com/en/topkapi/security-bulletins
• https://www.areal-topkapi.com/topkapi/bulletins-de-securite