CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

CVE-2023-35815

creationtimestamp| type| source ---|---|--- 2025-04-28 16:11:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13704 2025-04-28 19:50:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvjzczmbl2v 2025-04-28 19:55:06+00:00| seen| https://t.me/cvedetector/23925...

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

CVE-2023-35815

DevExpress before 23.1.3 has a vulnerability where the data-source protection mechanism can be bypassed during XML deserialization. Affected product: DevExpress (pre-23.1.3). Root cause: bypass of data-source protection on XML data. Practical impact (as stated): potential unauthorized access or m...