Missing Authorization in FastReport

2021-08-0217:28:16

Google

osv.dev

0.005 Low

EPSS

Percentile

76.7%

JSON

An issue was discovered in FastReport before 2020.4.0. It lacks a ScriptSecurity feature and therefore may mishandle (for example) GetType, typeof, TypeOf, DllImport, LoadLibrary, and GetProcAddress.

CPENameOperatorVersion
fastreport.opensourceeq2020.2.9
fastreport.opensourceeq2020.3.22
fastreport.opensourceeq2020.1.25
fastreport.opensourceeq2020.1.28
fastreport.opensourceeq2018.4.9
fastreport.opensourceeq2020.3.14
fastreport.opensourceeq2020.2.0
fastreport.opensourceeq2019.1.20
fastreport.opensourceeq2019.3.0
fastreport.opensourceeq2019.1.0

Name	Operator	Version
fastreport.opensource	eq	2020.2.9
fastreport.opensource	eq	2020.3.22
fastreport.opensource	eq	2020.1.25
fastreport.opensource	eq	2020.1.28
fastreport.opensource	eq	2018.4.9
fastreport.opensource	eq	2020.3.14
fastreport.opensource	eq	2020.2.0
fastreport.opensource	eq	2019.1.20
fastreport.opensource	eq	2019.3.0
fastreport.opensource	eq	2019.1.0