CVE-2023-50090

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-50090

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50090.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-50090

Aliases

GHSA-445x-c8qq-qfr9

Published

2024-01-03T20:15:21.660Z

Modified

2026-03-14T12:16:24.725867Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write arbitrary files and run arbitrary commands via crafted POST request.

References

Affected packages

Git / github.com/youseries/ureport

Affected ranges

Type

GIT

Repo

https://github.com/youseries/ureport

Events

Introduced

Last affected

3d89e71b05649d2635d60d606c60e7d0a5c06444

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.9"
        }
    ]
}

Affected versions

2.*

2.2.1

2.2.2

2.2.3

2.2.4

2.2.5

2.2.6

2.2.7

2.2.8

2.2.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50090.json"