cve/2023/CVE-2023-24187.md
2024-08-26 18:34:01 +00:00

624 B

CVE-2023-24187

Description

An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile.

POC

Reference

No PoCs from references.

Github