Lucene search
Ureport ProjectUreport
3 matches found
CVE-2020-21122
UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intranet device ports.
5.3CVSS5.2AI score0.00227EPSS
CVE-2020-21125
An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.
9.8CVSS9.6AI score0.00853EPSS
CVE-2020-21124
UReport 2.2.9 allows attackers to execute arbitrary code due to a lack of access control to the designer page.
9.8CVSS9.7AI score0.00743EPSS