CVE-2025-60852
A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25.0.9600. Applications built with affected versions of the framework did not properly sanitize user-controlled input before including it in CSV exports. This issue could lead to code execution on the system where the exported CSV file is opened.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-10-23 14:15:42
Güncelleme
2025-10-27 13:20:33
Source Identifier
cve@mitre.org
KEV Date Added
-