CVE-2023-31295

Summary

CVE-2023-31295 refers to a CSV Injection vulnerability discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6. This issue enables remote attackers to exploit the User Profile field and gain unauthorized access to sensitive information. By manipulating the CSV input, an adversary can inject malicious code and potentially steal data, posing a significant risk to system security. Organizations using the affected version of CPTO are urged to apply the necessary patches or upgrades to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.