Standalone Report Designer
Monthly
Remote code execution in Bold Reports Standalone Report Designer before 14.1.12 lets authenticated users abuse the file-upload feature to write files outside the intended directory via a crafted filename, ultimately running arbitrary commands with high privileges on the host. The flaw chains a CWE-22 path traversal into server-side command execution, and per the CVSS 4.0 vector requires only low privileges with no user interaction over the network. No public exploit identified at time of analysis, though a VulnCheck advisory documents the issue.
Arbitrary file read in Bold Reports Standalone Report Designer before 14.1.12 lets unauthenticated remote attackers retrieve any file on the host through a path traversal flaw in the database download feature. Because readable files can include stored authentication credentials, a single crafted request can escalate to full unauthorized access to the application. There is no public exploit identified at time of analysis, but the CVSS 4.0 base score of 9.3 and zero-precondition attack surface make this a high-priority patch.
Arbitrary file read in Bold Reports Standalone Report Designer before 14.1.12 lets unauthenticated remote attackers traverse the filesystem via the font-processing feature and retrieve any file the service account can access. Because readable files include stored authentication credentials, a successful read can be pivoted into full unauthorized access to the application. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV, but the CVSS 4.0 base score is 9.3 (Critical).
Arbitrary file read in Bold Reports Standalone Report Designer before 14.1.12 lets unauthenticated remote attackers retrieve any file on the server through a path traversal flaw in the SVG processing feature. Because readable files include stored authentication credentials, an attacker can pivot from file disclosure to full unauthorized access of the application. Disclosed by VulnCheck with a CVSS 4.0 base of 9.3; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in Bold Reports Standalone Report Designer before 14.1.12 lets authenticated users abuse the file-upload feature to write files outside the intended directory via a crafted filename, ultimately running arbitrary commands with high privileges on the host. The flaw chains a CWE-22 path traversal into server-side command execution, and per the CVSS 4.0 vector requires only low privileges with no user interaction over the network. No public exploit identified at time of analysis, though a VulnCheck advisory documents the issue.
Arbitrary file read in Bold Reports Standalone Report Designer before 14.1.12 lets unauthenticated remote attackers retrieve any file on the host through a path traversal flaw in the database download feature. Because readable files can include stored authentication credentials, a single crafted request can escalate to full unauthorized access to the application. There is no public exploit identified at time of analysis, but the CVSS 4.0 base score of 9.3 and zero-precondition attack surface make this a high-priority patch.
Arbitrary file read in Bold Reports Standalone Report Designer before 14.1.12 lets unauthenticated remote attackers traverse the filesystem via the font-processing feature and retrieve any file the service account can access. Because readable files include stored authentication credentials, a successful read can be pivoted into full unauthorized access to the application. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV, but the CVSS 4.0 base score is 9.3 (Critical).
Arbitrary file read in Bold Reports Standalone Report Designer before 14.1.12 lets unauthenticated remote attackers retrieve any file on the server through a path traversal flaw in the SVG processing feature. Because readable files include stored authentication credentials, an attacker can pivot from file disclosure to full unauthorized access of the application. Disclosed by VulnCheck with a CVSS 4.0 base of 9.3; no public exploit identified at time of analysis and it is not listed in CISA KEV.