Low severity3.5NVD Advisory· Published Apr 28, 2025· Updated Jun 17, 2026
CVE-2023-35816
CVE-2023-35816
Description
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:devexpress:devexpress:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:devexpress:devexpress:*:*:*:*:*:*:*:*range: <21.2.12
- cpe:2.3:a:devexpress:devexpress:22.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:devexpress:devexpress:22.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:devexpress:devexpress:22.2.5:*:*:*:*:*:*:*
- (no CPE)range: <23.1.3
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
4- code-white.com/public-vulnerability-list/nvdVendor Advisory
- supportcenter.devexpress.com/ticket/details/t1127422/insecure-arbitrary-typeconverter-conversionnvdPermissions Required
- supportcenter.devexpress.com/ticket/details/t1159641/net-desktop-and-web-controls-unsafe-data-type-deserializationnvdPermissions Required
- supportcenter.devexpress.com/ticket/details/t394936/devexpress-security-advisory-updated-on-april-27-2023nvdPermissions Required
News mentions
0No linked articles in our index yet.