EXPOSURES › CVE-2023-24188

CVE-2023-24188

CRITICAL

DETAIL

SourceNVD · cve Published2023-02-13 CVSS9.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-24188 ↗

SHAME 35/100

ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

ureport project · vendor ureport · product

DESCRIPTION

ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.