2 matches found
DevExpress SafeBinaryFormatter Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress XtraReports. Authentication is required to exploit this vulnerability. The specific flaw exists within the SafeBinaryFormatter library. The issue results from the lack of proper validation...
DevExpress XtraReports.UI 代码问题漏洞
DevExpress XtraReports.UI is an assembly from DevExpress, Inc. A security vulnerability exists in DevExpress.XtraReports.UI version 21.1 and earlier, which allows an attacker to execute arbitrary code via insecure deserialization...