Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.bstek.ureport:ureport2-core

4 known vulnerabilities (1 critical, 2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 critical, 2 high
Registry
Maven Central

Advisories 4

  • An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a…

    Affected: through 2.2.9.

  • An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file…

    Affected: through 2.2.9.

  • CVE-2023-24188Critical 9.1

    ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to…

    Affected: through 2.2.9.

  • An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.

    Affected: through 2.2.9.