EUVD-2021-1996

Malware in sbrugna...

UReport Server-Side Request Forgery Vulnerability

UReport is a high-performance pure Java reporting engine based on the Spring architecture. a server-side request forgery vulnerability exists in the designer page of UReport version 2.2.9. An attacker can use this vulnerability to detect intranet device ports...

CVE-2020-21122

UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...

CVE-2020-21122

UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...

PT-2021-10589

Name of the Vulnerable Software and Affected Versions: UReport version 2.2.9 Description: The issue allows attackers to detect intranet device ports through a Server-Side Request Forgery SSRF in the designer page. Recommendations: For UReport version 2.2.9, consider restricting access to the...

CVE-2020-21122: Server-Side Request Forgery (SSRF)

UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...