Ureport vulnerabilities

2 known vulnerabilities in Ureport from Ureport Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Ureport: Improper Restriction of XML External Entity Reference

  CVE-2023-24187Feb 14, 2023Ureport Project

  An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile.

• 9.1 Critical severity

  Ureport: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-24188Feb 13, 2023Ureport ProjectEPSS 1.21%

  ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.