Ureport2 Project vulnerabilities
We track 1 vulnerability in Ureport2 Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Ureport2 Project vulnerabilities
- 9.8 Critical severity
com.bstek.ureport:ureport2-console: Deserialization of Untrusted Data
All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets.