### [CVE-2018-8974](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8974)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial 'Source<script type="text/javascript" src=' line. Fix released on 2018-03-28.

### POC

#### Reference
- https://github.com/wshepherd0010/advisories/blob/master/CVE-2018-8974.md

#### Github
No PoCs found on GitHub currently.