90 matches found
CVE-2024-24397
Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the ReportName field...
CVE-2024-24397
Summary : CVE-2024-24397 affects Stimulsoft Dashboard.JS prior to 2024.1.2. The vulnerability is a Cross Site Scripting (XSS) flaw due to improper sanitization of the ReportName field, enabling a remote attacker to execute arbitrary code via a crafted payload. The commonly cited impact is client-...
Stimulsoft GmbH Stimulsoft Dashboard.JS security vulnerability
Stimulsoft GmbH Stimulsoft Dashboard.JS is a powerful dashboard development tool from Stimulsoft. A security vulnerability exists in Stimulsoft GmbH Stimulsoft Dashboard.JS versions prior to v.2024.1.2. An attacker can exploit this vulnerability to execute arbitrary code via a specially crafted...
PT-2024-20381
Name of the Vulnerable Software and Affected Versions Stimulsoft Dashboard.JS versions prior to 2024.1.2 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted payload to the "search bar component". This enables the attacker to perform unauthoriz...
PT-2024-20382
Name of the Vulnerable Software and Affected Versions Stimulsoft Dashboard.JS versions prior to 2024.1.2 Description The issue allows a remote attacker to execute arbitrary code via a crafted payload to the ReportName field. This enables the attacker to perform Cross Site Scripting attacks...
CVE-2023-25260
Stimulsoft Designer Web 2023.1.3 is vulnerable to Local File Inclusion...
CVE-2023-25260
Stimulsoft Designer Web 2023.1.3 is vulnerable to Local File Inclusion...
Design/Logic Flaw
Stimulsoft Designer Web 2023.1.3 is vulnerable to Local File Inclusion...
CVE-2023-25262
Stimulsoft GmbH Stimulsoft Designer Web 2023.1.3 is vulnerable to Server Side Request Forgery SSRF. TThe Reporting Designer Web offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather...
CVE-2023-25262
Stimulsoft GmbH Stimulsoft Designer Web 2023.1.3 is vulnerable to Server Side Request Forgery SSRF. TThe Reporting Designer Web offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather...
Server side request forgery (ssrf)
Stimulsoft GmbH Stimulsoft Designer Web 2023.1.3 is vulnerable to Server Side Request Forgery SSRF. TThe Reporting Designer Web offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather...
CVE-2023-25260
Stimulsoft Designer Web 2023.1.3 is vulnerable to Local File Inclusion...
CVE-2023-25262
Stimulsoft GmbH Stimulsoft Designer Web 2023.1.3 is vulnerable to Server Side Request Forgery SSRF. TThe Reporting Designer Web offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather...
CVE-2023-25262
CVE-2023-25262 affects Stimulsoft Designer (Web) 2023.1.3. The issue is an SSRF in the Reporting Designer (Web): when a user embeds sources from external locations, the server performs the request, potentially causing outbound traffic and data import, with possible exfiltration of internal-networ...
PT-2023-20005 · Stimulsoft · Stimulsoft Reporting Designer +1
Name of the Vulnerable Software and Affected Versions: Stimulsoft Designer Web version 2023.1.3 Description: The issue allows an attacker to perform Server Side Request Forgery SSRF attacks. The Reporting Designer Web can embed sources from external locations, and when a user chooses such a...
Stimulsoft 安全漏洞
Stimulsoft Stimulsoft Reports is an excellent set of reporting components for the .NET platform from Stimulsoft. NET platform for processing reports in JavaScript applications. A security vulnerability exists in Stimulsoft version 2023.1.3, which stems from the vulnerability of the system to loca...
CVE-2023-25260
CVE-2023-25260 affects Stimulsoft Designer (Web) 2023.1.3 and is described in connected documents as vulnerable to a Local File Inclusion (LFI) issue. The sources consistently identify the affected product and vulnerability type but provide no detailed technical specifics (e.g., exact vulnerable ...
CVE-2023-25262
Stimulsoft GmbH Stimulsoft Designer Web 2023.1.3 is vulnerable to Server Side Request Forgery SSRF. TThe Reporting Designer Web offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather...
Stimulsoft GmbH Stimulsoft Designer 代码问题漏洞
Stimulsoft GmbH Stimulsoft Designer is a robust product from Stimulsoft that runs on any computer and any platform. Engine, report designer and viewer for generating reports and analyzing data. A security vulnerability exists in Stimulsoft Designer Web version 2023.1.3, which stems fromThe...