Description
The Spreadsheet view is vulnerable to a XSS attack, where a remote unauthorised attacker can read a limited amount of values or DoS the affected spreadsheet. Disclosure of secrets or other system settings is not affected as well as other spreadsheets still work as expected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AREAL SAS | Topkapi Vision Webserv2 | 1.0.0 – ≤ 6.2.5474 | — |
References
- https://www.areal-topkapi.com/en/topkapi/security-bulletins vendor-advisory
- https://www.areal-topkapi.com/topkapi/bulletins-de-securite vendor-advisory