RCE in Reportbug-Ng Reportbug
CVE-2008-2230
Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.005 (41.5th percentile) — read the EPSS interpretation.
Affected products
- Reportbug-ng Reportbug — versions 3.8, 3.31
- Reportbug-ng — versions 0.2007.03.10, 0.2007.03.11, 0.2007.03.13
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Exploit)
- cve@mitre.org (x_refsource_CONFIRM, Exploit)