VendorsUReport Projectureportall versions
Vulnerabilities

UReport Project UReport

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2020-21124
UReport 2.2.9 allows attackers to execute arbitrary code due to a lack of access control to the designer page.
Published 2021-09-15 · Modified
9.8EPSS 0.022
CVE-2020-21125
An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.
Published 2021-09-15 · Modified
9.8EPSS 0.018
CVE-2023-24188
ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.
Published 2023-02-13 · Modified
9.1EPSS 0.012
CVE-2023-24187
An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile.
Published 2023-02-14 · Modified
7.8EPSS 0.009
CVE-2023-48848
An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path.
Published 2023-11-28 · Modified
7.5EPSS 0.009
CVE-2020-21122
UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intranet device ports.
Published 2021-09-15 · Modified
5.3EPSS 0.009