Ureport Project vulnerabilities
We track 2 vulnerabilities in Ureport Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 14, 2023.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Ureport Project vulnerabilities
- 7.8 High severity
Ureport: Improper Restriction of XML External Entity Reference
An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile.
- 9.1 Critical severity
Ureport: Improper Limitation of a Pathname to a Restricted Directory
ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.