CVE-2021-36483

DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization...

CVE-2021-36483

creationtimestamp| type| source ---|---|--- 2021-08-04 15:23:20+00:00| seen| https://t.me/cibsecurity/26792...

CVE-2021-36483

CVE-2021-36483 affects DevExpress.XtraReports.UI up to v21.1. It involves insecure deserialization that could allow an attacker to execute arbitrary code. The ZDI advisory notes this requires authentication and targets the SafeBinaryFormatter deserialization path in DevExpress XtraReports. Public...