UReport Project UReport 2.2.9
Approved changes feed: RSS · Atom
cpe:2.3:a:ureport_project:ureport:2.2.9:*:*:*:*:*:*:*part: a version: 2.2.9 update: *
| Vendor | Ureport Project (3780ed54-326d-56f7-b996-89ad8086ec4d) |
|---|---|
| Product | Ureport (c4a574f9-e322-586a-91e3-2343630bbfd7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/youseries/ureport |
purl2cpe | 2026-06-01 10:14:59.339275 |
pkg:maven/com.bstek.ureport/ureport2-core |
purl2cpe | 2026-06-01 10:14:59.339279 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-48848 |
vulnerable | 2026-06-08 06:14:28.212452 |
Details available
An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path.
Published: 2023-11-28T00:00:00.000Z
Updated: 2024-10-15T17:44:52.415Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24188 |
vulnerable | 2026-06-08 05:56:05.228328 |
Details available
ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.
Published: 2023-02-13T00:00:00.000Z
Updated: 2026-07-09T00:24:00.899Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24187 |
vulnerable | 2026-06-08 05:56:05.227842 |
Details available
An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile.
Published: 2023-02-14T00:00:00.000Z
Updated: 2026-07-09T00:23:59.667Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-21125 |
vulnerable | 2026-06-08 05:22:30.715313 |
Details available
An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.
Published: 2021-09-15T16:16:46.000Z
Updated: 2024-08-04T14:22:25.611Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-21124 |
vulnerable | 2026-06-08 05:22:30.714861 |
Details available
UReport 2.2.9 allows attackers to execute arbitrary code due to a lack of access control to the designer page.
Published: 2021-09-15T16:16:46.000Z
Updated: 2024-08-04T14:22:25.465Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-21122 |
vulnerable | 2026-06-08 05:22:30.714303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.