More information about this CVE will likely be available in a few days

Description

A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name.

Related CPE's

Could not find any relations

References

https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66834/README.md

https://trueconf.com

Weaknesses

Could not find any weaknesses

CVSS impact metrics

Could not find any metrics

Information

Source identifier

[email protected]

Vulnerability status

Received

Published

2025-12-30T19:15:44.720

3 hours ago

Last modified

2025-12-30T19:15:44.720

3 hours ago