CVE-2023-48848 - An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path

HIGH

An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path

Published Nov 28, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.95%

An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path.

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2941		Advisory
https://github.com/advisories/GHSA-9vfc-qxc8-wrpq		Advisory
https://github.com/h00klod0er/ureport2-vuln		Broken Link
https://nvd.nist.gov/vuln/detail/CVE-2023-48848

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 28, 2023

Updated Oct 15, 2024

Reserved Nov 20, 2023

Updated Oct 15, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Nov 28, 2023

Updated Oct 15, 2024

Exploited since n/a