CVE-2023-50090

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write arbitrary files and run arbitrary commands via crafted POST request.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://lemono.fun/thoughts/UReport2-RCE.htmlBroken Link
https://github.com/advisories/GHSA-445x-c8qq-qfr9Third Party Advisory
https://lemono.fun/thoughts/UReport2-RCE.htmlBroken Link

Timeline

Published: Jan 3, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-500926.1APIIDA API Gateway Manager for Broadcom Layer7 v2023.2 is vulnerable to Cross Site Scripting (XSS).CVE-2023-500936.1APIIDA API Gateway Manager for Broadcom Layer7 v2023.2.2 is vulnerable to Host Header Injection.CVE-2023-500948.8reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/to CVE-2023-500967.5STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to t CVE-2023-50108.8Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the mar CVE-2023-501005.4JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing.CVE-2023-501015.4JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.CVE-2023-501025.4JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-501049.8ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privil CVE-2023-50118.8Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the mar CVE-2023-501107.5TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.CVE-2023-50127.8A vulnerability, which was classified as problematic, was found in Topaz OFD 2.11.0.201. This affects an unknown part of the file C:\Program