VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 27, 2023· Updated Jul 9, 2026

CVE-2023-25261

CVE-2023-25261

Description

Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer (Desktop) 2023.1.4 and Stimulsoft Designer (Web) 2023.1.3 and Stimulsoft Viewer (Web) 2023.1.3. Access to the local file system is not prohibited in any way. Therefore, an attacker may include source code which reads or writes local directories and files. It is also possible for the attacker to prepare a report which has a variable that holds the gathered data and render it in the report.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Stimulsoft GmbH/Designer3 versions
    cpe:2.3:a:stimulsoft:designer:2023.1.3:*:*:*:web:*:*:*+ 2 more
    • cpe:2.3:a:stimulsoft:designer:2023.1.3:*:*:*:web:*:*:*
    • cpe:2.3:a:stimulsoft:designer:2023.1.4:*:*:*:web:*:*:*
    • cpe:2.3:a:stimulsoft:designer:2023.1:*:*:*:desktop:*:*:*
  • Stimulsoft GmbH/Viewer2 versions
    cpe:2.3:a:stimulsoft:viewer:2023.1.3:*:*:*:web:*:*:*+ 1 more
    • cpe:2.3:a:stimulsoft:viewer:2023.1.3:*:*:*:web:*:*:*
    • cpe:2.3:a:stimulsoft:viewer:2023.1.4:*:*:*:web:*:*:*
  • Stimulsoft GmbH/Stimulsoft Designerdescription
  • Stimulsoft GmbH/Stimulsoft Designer (Web)llm-fuzzy
    Range: 2023.1.4
  • Stimulsoft GmbH/Stimulsoft Viewerllm-fuzzy
    Range: 2023.1.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.