CVE-2025-3115 — Spotfire Data Function Vulnerability
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of f…
Published: 2025-04-09 · CVSS: 9.4 · CVSS 4.0
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7