CVE advisoryCRITICAL
CVE-2023-25261
Stimulsoft Designer and Viewer Remote Code Execution Vulnerability.
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Certain Stimulsoft reporting products contain a remote code execution vulnerability that allows an attacker to include source code to read or write local directories and files. This means an attacker could craft a report to execute arbitrary code, potentially impacting system files. Further investigation is needed to c