CVEvulnerability

CVE-2025-50572

8.8 HIGH Published 2025-07-31 Modified 2026-07-05 Official page ↗

Status: Deferred
Published: 2025-07-31
Last modified: 2026-07-05
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-1236

Description

Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file with compatible applications. NOTE: the Supplier does not accept this as a valid vulnerability report against their product.

Weakness · CWE (1)

CWE-1236 Improper Neutralization of Formula Elements in a CSV File weakness

References

https://github.com/shorooq-hummdi/Archer-csv-injection-command-exec/blob/main/README.md github.com
https://www.archerirm.community/s/blogs/formula-injection-into-csv-files-vulnerability-in-rsa-archer-6-1-x-and-higher-MCOCQFO3WCQBCCHMKNC74JGSFWQY www.archerirm.community

CVE-2025-50572

Description

Related

Weakness · CWE (1)

References