CVE-2024-31556

2024-05-1421:15:12

[email protected]

web.nvd.nist.gov

reportico web

security issue

code execution

sensitive information access

cve-2024-31556

nvd

7.1 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function.

References

github.com/reportico-web/reportico/issues/53