Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-15537.json"