Critical severity9.8NVD Advisory· Published Jun 23, 2025· Updated Jun 17, 2026
CVE-2023-47295
CVE-2023-47295
Description
A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload into any text field that accepts strings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:ncr:terminal_handler:1.5.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ncr:terminal_handler:1.5.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =1.5.1
Patches
Vulnerability mechanics
References
2- github.com/pwahba/cve-research/blob/main/CVE-2023-47295/CVE-2023-47295.mdnvdThird Party Advisory
- drive.google.com/file/d/14uldfUpLRIc-NfHiUco0ja-ZiF0MazGA/viewnvdPermissions Required
News mentions
0No linked articles in our index yet.