Finereport
by Finereport
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-48014 | Cri | 0.64 | 9.8 | — | Oct 22, 2026 | FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in… | ||
| CVE-2024-33450 | Hig | 0.49 | 7.5 | 0.00 | May 28, 2024 | SQL Injection in Finereport v.8.0 allows a remote attacker to obtain sensitive information |
- risk 0.64cvss 9.8epss —
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in…
- risk 0.49cvss 7.5epss 0.00
SQL Injection in Finereport v.8.0 allows a remote attacker to obtain sensitive information