CVE-2024-31556

2024-05-1421:15:12

Google

osv.dev

security vulnerability

local attacker

code execution

sensitive information

sessionid function

7.2 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function.

CPENameOperatorVersion
reporticoeq4.0-Beta
reporticoeqnewarc
reporticoeq7.0.3-alpha
reporticoeq7.1.34-beta
reporticoeq7.1.13-alpha
reporticoeq7.1.19-beta
reporticoeq7.1.37-beta
reporticoeq6.0.8
reporticoeq7.1.10-alpha
reporticoeq7.1.36-beta

Name	Operator	Version
reportico	eq	4.0-Beta
reportico	eq	newarc
reportico	eq	7.0.3-alpha
reportico	eq	7.1.34-beta
reportico	eq	7.1.13-alpha
reportico	eq	7.1.19-beta
reportico	eq	7.1.37-beta
reportico	eq	6.0.8
reportico	eq	7.1.10-alpha
reportico	eq	7.1.36-beta