CVE-2025-1836
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Mar 2, 2025
CWE ID 1236
CWE ID 74
Summary
CVE-2025-1836 is a newly discovered vulnerability affecting the Incorta 2023.4.3 software. This issue lies within the Edit Insight Handler component and is classified as problematic. The vulnerability stems from a csv injection weakness in an unknown function, which can be exploited by manipulating the Service Name argument. Attacks can be executed remotely, making this a significant security risk. Despite early disclosure, the vendor has yet to respond to this disclosure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.