En resumen
- CVE-2022-25767 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a com.bstek.ureport:ureport2-console.
- Probabilidad de explotación en los próximos 30 días (EPSS): 3.2%, mayor que el 88.2% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets.
NVD description
All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets.
Más vulnerabilidades de com.bstek.ureport:ureport2-console
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free