Description
An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path.
Remediation
References
https://github.com/h00klod0er/ureport2-vuln/
Related Vulnerabilities
CVE-2021-23337 Vulnerability in maven package org.webjars.npm:lodash
CVE-2016-4055 Vulnerability in maven package org.webjars.bower:moment
CVE-2021-23380 Vulnerability in npm package roar-pidusage
CVE-2019-6283 Vulnerability in npm package node-sass
CVE-2020-1935 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core