CVE-2025-1434
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Mar 11, 2025
CWE ID 79
Summary
CVE-2025-1434 refers to a Cross-Site Scripting (XSS) vulnerability in the Spreadsheet view. An unauthorized remote attacker can exploit this flaw to inject malicious scripts, potentially reading limited data or causing Denial of Service (DoS) to the affected spreadsheet. However, sensitive information disclosure or system settings are not at risk with this vulnerability, and other spreadsheets continue to function normally.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.