high5.3
CVE-2020-21122
Server-Side Request Forgery in UReport
Impact
UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intranet device ports.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.bstek.ureport:ureport2-console | <= 2.2.9 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ureport Project | Ureport | Version 2.2.9 |