{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.2.9"}],"component":"com.bstek.ureport:ureport2-core","cve_ids":["CVE-2023-48848"],"ecosystem":"Maven","epss":0.00948,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9vfc-qxc8-wrpq","id":"tcs_01M5N8QTKHBW4RS84E5HZFW0W3","modified_at":"2024-10-15T23:40:23.572865Z","published_at":"2023-11-28T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-9vfc-qxc8-wrpq","https://nvd.nist.gov/vuln/detail/CVE-2023-48848","https://github.com/h00klod0er/ureport2-vuln","https://github.com/youseries/ureport"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9vfc-qxc8-wrpq","url":"https://osv.dev/vulnerability/GHSA-9vfc-qxc8-wrpq"}],"summary":"ureport arbitrary file read vulnerability"}