Description
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). This issue affects: Secomea GateManager all versions prior to 9.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Secomea | GateManager | all – < 9.3 | 9.3 |