Description
An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path.
Remediation
References
https://github.com/h00klod0er/ureport2-vuln/
Related Vulnerabilities
CVE-2022-25931 Vulnerability in npm package easy-static-server
CVE-2021-23381 Vulnerability in npm package killing
CVE-2020-1948 Vulnerability in maven package org.apache.dubbo:dubbo-rpc
CVE-2018-6356 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2023-46122 Vulnerability in maven package org.scala-sbt:io_2.12