critical9.8
CVE-2020-21125
Remote code execution in UReport
Impact
An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.bstek.ureport:ureport2-core | <= 2.2.9 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ureport Project | Ureport | Version 2.2.9 |