CVE-2023-24187

Published: 2023-02-14T02:15Z

Last Modified: 2025-03-20T20:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt