← Database

CVE-2022-25767

CRITICAL CVSS: 9.8 Published: 2022-05-01 Modified: 2026-06-17

Description

All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets.

Affected Platforms

Ureport2 Project Ureport2

Weakness Type

CWE-502

References