Malicious code in test-syncfusion-bridge (npm)

The package test-syncfusion-bridge was found to contain malicious code...

CVE-2024-55969

DocIO in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 throws XMLException during the resaving of a DOCX document with an external reference XML, aka I640714...

CVE-2024-55970

File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the request parameter, aka I644734...

CVE-2023-26563

The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an unauthenticated attacker can: - On Windows, list files in any directory, read any file, delete any file, upload any file to any directory accessible by the web server. - On...

CVE-2023-26564

The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server...

CVE-2024-57064

A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. NOTE: the Supplier disputes this because they found that the lib.setValue function is not utilized...

CVE-2024-57064

A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. NOTE: the Supplier disputes this because they found that the lib.setValue function is not utilized...

CVE-2020-13532

A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges to NT SYSTEM. An attacker can provide a malicious file to trigger this vulnerability...

Syncfusion ej2-spreadsheet 安全漏洞

Syncfusion ej2-spreadsheet is a spreadsheet control from Syncfusion. A security vulnerability exists in Syncfusion ej2-spreadsheet version v27.2.2, which stems from the lib.setValue function containing a prototype contamination vulnerability...

CVE-2024-57064

A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. NOTE: the Supplier disputes this because they found that the lib.setValue function is not utilized...

CVE-2024-57064

The CVE refers to a prototype pollution issue in the lib.setValue function of Syncfusion EJ2-Spreadsheet (v27.2.2) that could enable DoS via crafted payloads. The supplier disputes the issue by noting that lib.setValue is not utilized. Connected documents consistently describe a DoS-inducing prot...

CVE-2024-57064

A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. NOTE: the Supplier disputes this because they found that the lib.setValue function is not utilized...

CVE-2024-55969

DocIO in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 throws XMLException during the resaving of a DOCX document with an external reference XML, aka I640714...

CVE-2024-55970

File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the request parameter, aka I644734...

CVE-2024-55970

CVE-2024-55970 affects Syncfusion Essential Studio for ASP.NET MVC prior to 27.1.55. The issue is a directory traversal in the File Manager component tied to a request parameter (I644734). Impact details in the connected sources indicate a traversal path could expose files/directories; no explici...

Syncfusion Essential Studio for ASP.NET MVC 安全漏洞

Syncfusion Essential Studio for ASP.NET MVC is a set of server-side wrappers powered by Essential JavaScript from Syncfusion. A security vulnerability exists in Syncfusion Essential Studio for ASP.NET MVC prior to version 27.1.55, which stems from a traversal issue with the file manager in...

CVE-2024-55969

DocIO in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 throws XMLException during the resaving of a DOCX document with an external reference XML, aka I640714...

CVE-2024-55970

File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the request parameter, aka I644734...

CVE-2024-55969

CVE-2024-55969 affects the DocIO component of Syncfusion Essential Studio for ASP.NET MVC prior to version 27.1.55 . The vulnerability occurs when resaving a DOCX document with an external reference XML, where an XMLException is thrown, potentially impacting document processing and availability. ...

PT-2024-36622 · Syncfusion · Syncfusion Essential Studio For Asp.Net Mvc

Name of the Vulnerable Software and Affected Versions: Syncfusion Essential Studio for ASP.NET MVC versions prior to 27.1.55 Description: The issue occurs when resaving a DOCX document with an external reference XML, resulting in an XMLException. This problem is present in the DocIO feature of...