Lucene search
HistoryJan 03, 2024 - 8:15 p.m.
CVE-2023-50090
cve-2023-50090
arbitrary file write
vulnerability
savereportfile method
ureport2 2.2.9
nvd
security
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.3%
Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write arbitrary files and run arbitrary commands via crafted POST request.
Affected configurations
Node
ureport2_projectureport2Range≤2.2.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| ureport2_project:ureport2 | ureport2 project ureport2 | le | 2.2.9 |
Related
nvd
nvd
CVE-2023-50090
2024-01-03 20:15:21
prion
prion
Design/Logic Flaw
2024-01-03 20:15:00
osv
osv
CVE-2023-50090
2024-01-03 20:15:21
cvelist
cvelist
CVE-2023-50090
2024-01-03 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.3%
Related for CVE-2023-50090