Bold Reports (By SyncFusion) vulnerabilities
We track 4 vulnerabilities in Bold Reports (By SyncFusion) products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 23, 2026.
Latest Bold Reports (By SyncFusion) vulnerabilities
- 8.8 High severity
Standalone Report Designer: Improper Limitation of a Pathname to a Restricted Directory
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its file upload functionality that allows authenticated attackers to traverse outside the intended directory by supplying a crafted filename. Attacke
- 9.8 Critical severity
Standalone Report Designer: Improper Limitation of a Pathname to a Restricted Directory
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request
- 9.8 Critical severity
Standalone Report Designer: Improper Limitation of a Pathname to a Restricted Directory
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its font processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request.
- 9.8 Critical severity
Standalone Report Designer: Improper Limitation of a Pathname to a Restricted Directory
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its SVG processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. A