p PatchFirst

CVE-2024-31556

CVE-2024-31556

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function.

CVSS 7.8 · High · EPSS 0.2%

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • reportico-web/reportico Packagist

    Versions
    • 4.6
    • 6.0.0
    • 6.0.1
    • 6.0.10
    • 6.0.11
    • 6.0.12
    • 6.0.13
    • 6.0.14
    • 6.0.15
    • 6.0.16
    • 6.0.2
    • 6.0.3
    • 6.0.4
    • 6.0.5
    • 6.0.6
    • 6.0.7
    • 6.0.8
    • 6.0.9
    • 7.0.1-alpha
    • 7.0.10-alpha
    • 7.0.2-alpha
    • 7.0.3-alpha
    • 7.0.4-alpha
    • 7.0.5-alpha
    • 7.0.6-alpha
    • 7.0.7-alpha
    • 7.0.8-alpha
    • 7.0.9-alpha
    • 7.1.0-alpha
    • 7.1.1-alpha
    • 7.1.10-alpha
    • 7.1.11-alpha
    • 7.1.12-alpha
    • 7.1.13-alpha
    • 7.1.14-alpha
    • 7.1.15-alpha
    • 7.1.16-alpha
    • 7.1.17-alpha
    • 7.1.18-alpha
    • 7.1.19-beta
    • 7.1.2-alpha
    • 7.1.20-beta
    • 7.1.21-beta
    • 7.1.22-beta
    • 7.1.23-beta
    • 7.1.24-beta
    • 7.1.25-beta
    • 7.1.26-beta
    • 7.1.27-beta
    • 7.1.28-beta
    • 7.1.29-beta
    • 7.1.3-alpha
    • 7.1.30-beta
    • 7.1.31-beta
    • 7.1.32-beta
    • 7.1.33-beta
    • 7.1.34-beta
    • 7.1.35-beta
    • 7.1.36-beta
    • 7.1.37-beta
    • 7.1.38-beta
    • 7.1.39-beta
    • 7.1.4-alpha
    • 7.1.40-beta
    • 7.1.41-beta
    • 7.1.42-beta
    • 7.1.5-alpha
    • 7.1.6-alpha
    • 7.1.7-alpha
    • 7.1.8-alpha
    • 7.1.9-alpha
    • 8.0.1
    • 8.0.2
    • 8.0.3
    • 8.1.0
    Affected ranges
    • ECOSYSTEM: ≤ 8.1.0

    No fix published

Original sources

Check your server →