Remote code execution in UReport

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-21125 · ADVISORY
• youseries/ureport · WEB
• youseries/ureport · PACKAGE

com.bstek.ureport:ureport2-core のその他の脆弱性

• CVE-2023-48848高 7.5An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a craft…
• CVE-2023-24187高 7.8An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to …
• CVE-2023-24188緊急 9.1ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to b…