Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-42777
HistoryOct 29, 2022 - 5:15 p.m.

Code injection

2022-10-2917:15:00
PRIOn knowledge base
www.prio-n.com
4
stimulsoft reports
code injection
compilation mode
arbitrary c# code
system.diagnostics.process.start
security vulnerability
nvd

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any machine that renders a report, including the application server or a user’s local machine, as demonstrated by System.Diagnostics.Process.Start.

CPENameOperatorVersion
reportseq2013.1.1600.0

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

Related for PRION:CVE-2021-42777