Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.bstek.ureport/ureport2-console@2.2.8
purl pkg:maven/com.bstek.ureport/ureport2-console@2.2.8
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-6q3p-36f4-cwxv
Aliases:
CVE-2020-21122
Server-Side Request Forgery in UReport UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers … There are no reported fixed by versions.
GHSA-w39x-chvm-pj3c
Aliases:
CVE-2022-25767
Deserialization of Untrusted Data in com.bstek.ureport:ureport2-console All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to … There are no reported fixed by versions.
CVE-2020-21125
Aliases:
GHSA-729f-wvj3-c4pj
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') An arbitrary file creation vulnerability in UReport … There are no reported fixed by versions.
This package is not known to fix any advisories.