Ureport2 Project Ureport2
2 CVEs affecting Ureport2 Project Ureport2. Latest disclosed: 2024-01-03. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-50090 | Critical | 9.8 | 2024-01-03 | Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write arbitrary files and run arbitrary comman… |
CVE-2022-25767 | Critical | 9.8 | 2022-05-01 | All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitr… |