What’s Vulnerable › Vulnerabilities

CVE-2025-1434: XSS in AREAL SAS Topkapi Vision Webserv2

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-11 · updated 2026-06-17
• Weakness: CWE-79

Description

The Spreadsheet view is vulnerable to a XSS attack, where a remote unauthorised attacker can read a limited amount of values or DoS the affected spreadsheet. Disclosure of secrets or other system settings is not affected as well as other spreadsheets still work as expected.

Affected products

• AREAL SAS Topkapi Vision Webserv2: from 1.0.0 through 6.2.5474

References

• https://www.areal-topkapi.com/en/topkapi/security-bulletins
• https://www.areal-topkapi.com/topkapi/bulletins-de-securite

Get alerted when CVE-2025-1434 or the next vulnerability affects your stack