CVE-2023-33410

PoC —

CVSS 3.1

8.8 high

EPSS

1%p66

Published

Jun 5, 2023 (Jun 5, 2023)

Modified

Jun 17, 2026

Description

Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on the Customer Name field in the Accounting module that is used to construct a CSV file.

Vendors: minical
Products: minical
Weakness: CWE-1236
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.