Stimulsoft vulnerabilities
We track 3 vulnerabilities in Stimulsoft products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 6, 2024.
Latest Stimulsoft vulnerabilities
- 9.8 Critical severity
Dashboards.php: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.
- 7.5 High severity
Designer: Server-Side Request Forgery
Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting Designer (Web) offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that
- 9.8 Critical severity
Designer: Improper Control of Generation of Code
Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer (Desktop) 2023.1.4 and Stimulsoft Designer (Web) 2023.1.3 and Stimulsoft Viewer (Web) 2023.1.3. Access to the local file system is not prohibited in any w