VULNERABILITY INTELLIGENCE

CVE-2023-33410

CVSS score8.8 HIGH

EPSS probability1.16%

CISA KEVNot currently listed

Published2023-06-05

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on the Customer Name field in the Accounting module that is used to construct a CSV file.

Weakness classification

nvd@nist.gov: CWE-1236
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-1236

Primary references

cve@mitre.org — Exploit, Third Party Advisory
cve@mitre.org — Product
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Product