HIGH🇵🇱 Wersja polska

CVE-2023-25260

CVSS 7.5v3.1pub. 2023-03-28upd. 2026-07-09

Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Stimulsoft Designer

    APP
    Stimulsoft
    2023.1.32023.1.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-25261CRITICAL9.8PL ✓same product

RCE w Stimulsoft Designer i Viewer — brak ograniczeń dostępu do systemu plików

CVE-2023-25262HIGH7.5same product

Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe R...

CVE-2023-25263MEDIUM5.5same product

In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll...

CVE-2024-24398CRITICAL9.8PL ✓same vendor

Path Traversal umożliwiający RCE w Stimulsoft Dashboard.JS

CVE-2021-42777CRITICAL9.8PL ✓same vendor

RCE w Stimulsoft Reports — wykonanie kodu C# przez raport