Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:27731
HistoryNov 02, 2020 - 7:24 a.m.

Remote Code Execution (RCE)

2020-11-0207:24:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.005 Low

EPSS

Percentile

76.7%

JSON

FastReport.OpenSource is vulnerable to remote code execution (RCE). An attacker can create a new expression or edit an existing one into, for example [System.String.Join(“,”, System.IO.Directory.GetDirectories(@“c:/”))] as the library does not use ScriptSecurity feature and mishandle GetType, typeof, TypeOf, DllImport, LoadLibrary, and GetProcAddress.

CPENameOperatorVersion
fastreport.opensourcele2020.3.22

Related

cve 1
prion 1
cvelist 1
osv 2
nvd 1
github 1
cve
cve
CVE-2020-27998
2020-10-29 18:15:12
prion
prion
Design/Logic Flaw
2020-10-29 18:15:00
cvelist
cvelist
CVE-2020-27998
2020-10-29 17:08:03
osv
osv
CVE-2020-27998
2020-10-29 18:15:12
Missing Authorization in FastReport
2021-08-02 17:28:16
nvd
nvd
CVE-2020-27998
2020-10-29 18:15:12
github
github
Missing Authorization in FastReport
2021-08-02 17:28:16

0.005 Low

EPSS

Percentile

76.7%

JSON
Related for VERACODE:27731
cve1prion1cvelist1osv2nvd1github1