Ureport2 vulnerabilities

1 known vulnerability in Ureport2 from Ureport2 Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  com.bstek.ureport:ureport2-console: Deserialization of Untrusted Data

  CVE-2022-25767May 1, 2022Com.bstek.ureport:ureport2-consoleEPSS 3.19%

  All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets.