CVE-2021-42777 — n/a / n/a

Description (CNA)

Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any machine that renders a report, including the application server or a user's local machine, as demonstrated by System.Diagnostics.Process.Start.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

http://burninatorsec.blogspot.com/2022/04/library-rce-object-chaining-cve-2021.html

ADP enrichment

CVE

No English description supplied.

http://burninatorsec.blogspot.com/2022/04/library-rce-object-chaining-cve-2021.html

CISA-ADP

No English description supplied.

No references supplied.