CVE-2025-1434CWE-79
XSS in AREAL SAS Topkapi Vision Webserv2
Medium · published March 11, 2025
What it is
The Spreadsheet view is vulnerable to a XSS attack, where a remote unauthorised attacker can read a limited amount of values or DoS the affected spreadsheet. Disclosure of secrets or other system settings is not affected as well as other spreadsheets still work as expected.
The record
Technical detail
- CVSS v3.1
- 6.1 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00271 · 18.3th percentile
- Weakness
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Published
- 2025-03-11T07:23Z
EPSS history
Timeline