CVE-2023-25262
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
Stimulsoft Designer (Web) 2023.1.3 is vulnerable to SSRF. The server makes requests to external data sources, which can be exploited to leak data from the internal network.
Risk Assessment
An attacker can use this vulnerability to scan the organization's internal network and steal confidential data from server machines.
Recommendation
It is recommended to update to the latest version of Stimulsoft Designer and restrict outbound network traffic from the server to trusted addresses only.
Other vulnerabilities in Stimulsoft Designer
See all- CVE-2023-25261Critical
A vulnerability in Stimulsoft products allows remote code execution. Versions 2023.1.4 (Designer Desktop) and 2023.1.3 (Designer Web and Viewer Web) do not restrict access to the local file system, enabling an attacker to read and write files and directories. The attacker can also prepare a report with a variable holding gathered data and render it.
- CVE-2023-25260High
A Local File Inclusion (LFI) vulnerability in Stimulsoft Designer (Web) 2023.1.3 allows an attacker to read arbitrary files from the server. The flaw is due to improper validation of file paths in the application.
- CVE-2023-25263Medium
In Stimulsoft Designer (Desktop) versions 2023.1.5 and 2023.1.4, after decompiling the Stimulsoft.report.dll library, an attacker can decrypt any connection string stored in .mrt files because a static secret is used. This secret is identical across all tested versions and operating systems.
Original NVD description (English source)
Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting Designer (Web) offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather than the client. Therefore, the server causes outbound traffic and potentially imports data. An attacker may also leverage this behaviour to exfiltrate data of machines on the internal network of the server hosting the Stimulsoft Reporting Designer (Web).