CVE-2025-3114 – Spotfire Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2025-3114

09 Apr 2025 — Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls. Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without ad... • https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-april-08-2025-spotfire-cve-2025-3114-r3484 • CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-693: Protection Mechanism Failure •