CVE-2018-9113: Cdc Microbetrace

High severity, CVSS 7.8. EPSS: 4% chance of exploitation in the next 30 days.

Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial '><script type="text/javascript" src=' line. Fix released on 2018-03-29.

Affected products

• Cdc Microbetrace: version 0.1.12 only

Published 2018-04-26. Last modified 2026-06-17.