critical9.8
CVE-2023-47295
A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload into any text field…
Impact
A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload into any text field that accepts strings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ncr | Terminal Handler | Version 1.5.1 |