CVE-2023-25263

PoC —

CVSS 3.1

5.5 medium

EPSS

<1%p14

Published

Mar 27, 2023 (Mar 27, 2023)

Modified

Jul 9, 2026

Description

In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrypt any connectionstring stored in .mrt files since a static secret is used. The secret does not differ between the tested versions and different operating systems.

Vendors: stimulsoft
Products: designer
Weakness: CWE-312
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.