Microbetrace · Microbetrace · CVE-2018-8974
**Name of the Vulnerable Software and Affected Versions**
MicrobeTRACE version 0.1.11
**Description**
The issue allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial 'Source<script type="text/javascript" src=' line.
**Recommendations**
For MicrobeTRACE version 0.1.11, update to a version released after 2018-03-28 to resolve the issue. As a temporary workaround, consider restricting the import of CSV files or validating their content to prevent code injection.