CVE-2023-48848: ureport arbitrary file read vulnerability

November 28, 2023 (updated October 15, 2024)

An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path.

References

github.com/advisories/GHSA-9vfc-qxc8-wrpq
github.com/h00klod0er/ureport2-vuln
github.com/youseries/ureport
nvd.nist.gov/vuln/detail/CVE-2023-48848

Code Behaviors & Features

Detect and mitigate CVE-2023-48848 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →