| Package | Affected versions | Patched versions |
|---|---|---|
| com.bstek.ureport:ureport2-core | ≤ 2.2.9 | |
| ureport | = 2.2.9 |
An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free