DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization.
8.8CVSS
8.9AI Score
0.015EPSS
This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this vulnerability. The specific flaw exists within the SafeBinaryFormatter library. The issue results from the lack of proper validation of user-suppl...
8.8CVSS
9AI Score
0.022EPSS