Skip to content
OpenAdvisories

Vendor

Bold Reports (By SyncFusion)

4 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.8

    Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Database Download

    Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted reques…

  • Critical 9.8

    Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Font Processing

    Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its font processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request.…

  • Critical 9.8

    Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via SVG Processing

    Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its SVG processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. …