Description
An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path.
Remediation
References
https://github.com/h00klod0er/ureport2-vuln/
Related Vulnerabilities
CVE-2023-1784 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-parent
CVE-2021-23337 Vulnerability in npm package lodash
CVE-2021-23337 Vulnerability in maven package org.webjars.bower:lodash
CVE-2016-4055 Vulnerability in maven package org.webjars.bower:moment
CVE-2020-7684 Vulnerability in npm package rollup-plugin-serve