Search for packages
| purl | pkg:maven/com.bstek.ureport/ureport2-console@2.2.9 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-6q3p-36f4-cwxv
Aliases: CVE-2020-21122 |
Server-Side Request Forgery in UReport UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers … | There are no reported fixed by versions. |
|
GHSA-w39x-chvm-pj3c
Aliases: CVE-2022-25767 |
Deserialization of Untrusted Data in com.bstek.ureport:ureport2-console All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to … | There are no reported fixed by versions. |
|
CVE-2023-24188
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') ureport v2.2.9 was discovered to contain a directory traversal … | There are no reported fixed by versions. |
|
CVE-2020-21125
Aliases: GHSA-729f-wvj3-c4pj |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') An arbitrary file creation vulnerability in UReport … | There are no reported fixed by versions. |
|
CVE-2023-24187
|
Improper Restriction of XML External Entity Reference An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute … | There are no reported fixed by versions. |
|
CVE-2023-48848
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') An arbitrary file read vulnerability in ureport v2.2.9 allows … | There are no reported fixed by versions. |