Description
Newforma Info Exchange (NIX) provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Newforma | Project Center | < 2024.1 | 2024.1 |
Advisories 1
- VA-25-282-01 Newforma Project Center multiple vulnerabilities CISA ICS & IT advisories · Oct 9, 2025