CVE-2023-24188: Arbitrary file deletion in ureport

February 13, 2023 (updated February 14, 2023)

ureport v2.2.9 was discovered to contain an arbitrary file deletion vulnerability.

References

ureport.com/
github.com/advisories/GHSA-6fcj-9vfw-jq2m
github.com/cgddgc/vulns/blob/main/ureport2-filedelete-vuln.md
github.com/youseries/ureport
nvd.nist.gov/vuln/detail/CVE-2023-24188

Code Behaviors & Features

Detect and mitigate CVE-2023-24188 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →