CVE-2023-24188: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

February 13, 2023 (updated February 22, 2023)

ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.

References

ureport.com/
github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24188.md
github.com/youseries/ureport
nvd.nist.gov/vuln/detail/CVE-2023-24188

Code Behaviors & Features

Detect and mitigate CVE-2023-24188 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →