CVE-2022-25767

CVE-2022-25767 affects all versions of the Java package com.bstek.ureport:ureport2-console. The vulnerability enables Remote Code Execution via deserialization when the system connects to a malicious database server, leading to arbitrary file reads and deserialization of local gadgets. Multiple s...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2022-25767 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.1 Source cves: CVE-2022-25767 Source advisory: SNYK:JAVA-COMBSTEKUREPORT-2322018...