ureport arbitrary file read vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-48848 · ADVISORY
• h00klod0er/ureport2-vuln · WEB
• youseries/ureport · PACKAGE
• h00klod0er/ureport2-vuln · Broken Link

Weitere Schwachstellen in com.bstek.ureport:ureport2-core

• CVE-2023-24187HOCH 7.8An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to …
• CVE-2023-24188KRITISCH 9.1ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to b…
• CVE-2020-21125KRITISCH 9.8An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.