Ureport Project
Ureport Project Ureport: vulnerabilidades y CVE
Ureport Project Ureport tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-48848 | Alta (7.5) | 0.95% | — | 28 nov 2023 | An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path. |
| CVE-2023-24187 | Alta (7.8) | 0.93% | — | 14 feb 2023 | An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile. |
| CVE-2023-24188 | Crítica (9.1) | 1.2% | — | 13 feb 2023 | ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted. |
| CVE-2020-21125 | Crítica (9.8) | 1.8% | — | 15 sept 2021 | An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code. |
| CVE-2020-21124 | Crítica (9.8) | 2.2% | — | 15 sept 2021 | UReport 2.2.9 allows attackers to execute arbitrary code due to a lack of access control to the designer page. |
| CVE-2020-21122 | Media (5.3) | 0.85% | — | 15 sept 2021 | UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intranet device ports. |