VULNERABILITY INTELLIGENCE

CVE-2008-2230

CVSS score4.6 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2008-06-11
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references