CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-1434: XSS in AREAL SAS Topkapi Vision Webserv2
6.1
CVSS
Description
The Spreadsheet view is vulnerable to a XSS attack, where a remote unauthorised attacker can read a limited amount of values or DoS the affected spreadsheet. Disclosure of secrets or other system settings is not affected as well as other spreadsheets still work as expected.
Classification
CVE ID: CVE-2025-1434
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.1
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L
Problem Types
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected Products
Vendor: AREAL SAS
Product: Topkapi Vision Webserv2
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 7.23% (scored less or equal to compared to others)
EPSS Date: 2025-04-09 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-1434https://www.areal-topkapi.com/en/topkapi/security-bulletins
https://www.areal-topkapi.com/topkapi/bulletins-de-securite