High severity8.0NVD Advisory· Published Nov 17, 2023· Updated Jun 17, 2026

CVE-2023-48029

Description

Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious payload on the administrator's computer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Corebos/Corebos2 versions
cpe:2.3:a:corebos:corebos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:corebos:corebos:*:*:*:*:*:*:*:*range: <=8.0
- (no CPE)range: <=8.0
Corebos/Corebosdescription

Patches

Vulnerability mechanics

References

nitipoom-jar.github.io/CVE-2023-48029/nvdExploit
gist.github.com/bugplorer/09d312373066a3b72996ebd76a7a23a5nvdBroken Link
nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48029nvd

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000