CVE-2025-1434

Medium

Description

The Spreadsheet view is vulnerable to a XSS attack, where a remote unauthorised attacker can read a limited amount of values or DoS the affected spreadsheet. Disclosure of secrets or other system settings is not affected as well as other spreadsheets still work as expected.

SeverityMedium

CVSS6.1

Exploit probability—

ProductTopkapi Vision Webserv2

PublishedMar 11, 2025

First seenMar 11, 2025

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Vendor advisories

areal-topkapi.com/en/topkapi/security-bulletins
areal-topkapi.com/topkapi/bulletins-de-securite

Affected products

Product	Affected versions	Fixed in
AREAL SAS Topkapi Vision Webserv2	1.0.0 ≤ v ≤ 6.2.5474	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.