A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name.
高危 CVSS 7.3
摘要
A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66834/README.md Exploit
- https://trueconf.com Product
- https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66834/README.md Exploit
时间线
- nvd_ingest NVD