CVE-2025-60852 – “Instant Developer Foundation CSV Injection”

CVE ID : CVE-2025-60852

Published : Oct. 23, 2025, 2:15 p.m. | 27 minutes ago

Description : A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25.0.9600. Applications built with affected versions of the framework did not properly sanitize user-controlled input before including it in CSV exports. This issue could lead to code execution on the system where the exported CSV file is opened.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…