high7.3
CVE-2025-66834
A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via…
Impact
A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trueconf | Trueconf Server | Version 5.5.2.10813 |