Standalone Report Designer vulnerabilities
4 known vulnerabilities in Standalone Report Designer from Bold Reports (By SyncFusion). 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Standalone Report Designer: Improper Limitation of a Pathname to a Restricted Directory
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its file upload functionality that allows authenticated attackers to traverse outside the intended directory by supplying a crafted filename. Attacke
- 9.8 Critical severity
Standalone Report Designer: Improper Limitation of a Pathname to a Restricted Directory
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request
- 9.8 Critical severity
Standalone Report Designer: Improper Limitation of a Pathname to a Restricted Directory
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its font processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request.
- 9.8 Critical severity
Standalone Report Designer: Improper Limitation of a Pathname to a Restricted Directory
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its SVG processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. A