Remote code execution in UReport

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-21125 · ADVISORY
• youseries/ureport · WEB
• youseries/ureport · PACKAGE

Lỗ hổng khác của com.bstek.ureport:ureport2-core

• CVE-2023-48848CAO 7.5An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a craft…
• CVE-2023-24187CAO 7.8An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to …
• CVE-2023-24188NGHIÊM TRỌNG 9.1ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to b…