Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-24187

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-fhj6-gr87-g4cj

XML External Entity Reference in ureport An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile.

gitlab/maven/com.bstek.ureport/ureport2-console/CVE-2023-24187

Improper Restriction of XML External Entity Reference An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile.

gitlab/maven/com.bstek.ureport/ureport2-core/CVE-2023-24187

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile.