CVE-2022-25767
1 advisory.
Maven/com.bstek.ureport:ureport2-console CVE-2022-25767: critical 9.8
Deserialization of Untrusted Data in com.bstek.ureport:ureport2-console
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.2.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w39x-chvm-pj3c
- https://nvd.nist.gov/vuln/detail/CVE-2022-25767
- https://github.com/JinYiTong/CVE-Req/blob/main/ureport2/ureport2-console.md
- https://github.com/youseries/ureport
- https://snyk.io/vuln/SNYK-JAVA-COMBSTEKUREPORT-2322018
CVE-2022-25767 · published · modified · JSON