CVE-2023-24188
Published
CVSS v3
9.1
CRITICAL
CVSS v2
N/A
Affected
2
PROJECTS
Description
ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.
UReport2 is a high-performance pure Java report engine based on Spring architecture, where complex Chinese-style statements and reports can be prepared by iterating over cells.