CVE-2020-27998

2020-10-2918:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.7%

JSON

An issue was discovered in FastReport before 2020.4.0. It lacks a ScriptSecurity feature and therefore may mishandle (for example) GetType, typeof, TypeOf, DllImport, LoadLibrary, and GetProcAddress.

CPENameOperatorVersion
fastreporteq2018.4.15
fastreporteq2018.4.14
fastreporteq2019.2.0
fastreporteq2019.4.0
fastreporteq2019.2.7
fastreporteq2019.1.0
fastreporteq2018.4.9
fastreporteq2020.1.0
fastreporteq2019.3.0
fastreporteq2018.4.7

Name	Operator	Version
fastreport	eq	2018.4.15
fastreport	eq	2018.4.14
fastreport	eq	2019.2.0
fastreport	eq	2019.4.0
fastreport	eq	2019.2.7
fastreport	eq	2019.1.0
fastreport	eq	2018.4.9
fastreport	eq	2020.1.0
fastreport	eq	2019.3.0
fastreport	eq	2018.4.7