Description
An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | reportico-web/reportico | <= 8.1.0 | — | GHSA-2q2f-h83x-cx3x |