High CVE-2020-21122 EUVD-2021-1996GHSA-6q3p-36f4-cwxv

Server-Side Request Forgery in UReport

Published Sep 15, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intranet device ports.

Ecosystem	Package	Affected	Fixed	Record
Maven	com.bstek.ureport:ureport2-console	<= 2.2.9	—	GHSA-6q3p-36f4-cwxv