CVE-2023-50090

2024-01-0300:00:00

mitre

www.cve.org

arbitrary file write

vulnerability

ureport2

post request

crafted

arbitrary files

arbitrary commands

AI Score

9.8

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write arbitrary files and run arbitrary commands via crafted POST request.

References

lemono.fun/thoughts/UReport2-RCE.html