PT-2025-43514 · Unknown · Instant Developer Foundation

Published 2025-10-23 · Updated 2025-10-23 · CVE-2025-60852

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Instant Developer Foundation versions prior to 25.0.9600

Description A CSV Injection issue existed in the software. Applications built with affected versions did not properly sanitize user-controlled input before including it in CSV exports. This could lead to code execution on the system where the exported CSV file is opened.

Recommendations Update to version 25.0.9600 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

CVE-2025-60852

Affected Products

Instant Developer Foundation

References · 6

• 🔥 https://github.com/valeriocassoni/CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60852 · Security Note
• https://twitter.com/CVEnew/status/1981364162165875084 · Twitter Post
• https://doc.instantdeveloper.com/eng/default.aspx?artid=a6c69034-d1ee-4057-b19d-40505151ec8e&lang=eng · Note
• https://instantdeveloper.com/lp/cloud-freelance/index.html · Note
• https://t.me/CVEtracker/35576 · Telegram Post