What is GHSA-x3r2-vhf8-v655?

GHSA-x3r2-vhf8-v655 is a security advisory published by GitHub Security Advisories with Medium severity. A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is...

Which CVE IDs does GHSA-x3r2-vhf8-v655 cover?

GHSA-x3r2-vhf8-v655 covers the following CVE IDs: CVE-2026-9524. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x3r2-vhf8-v655?

GHSA-x3r2-vhf8-v655 has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

GHSA-x3r2-vhf8-v655MediumCVSS 6.3

A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is...

Vendor

GitHub Security Advisories

Published

May 26, 2026

Last Modified

May 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-9524 →

📋 Description

A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is the function execute of the component REST Endpoint. Executing a manipulation of the argument reportParams can lead to sql injection. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-9524
https://github.com/Ku4D3/bug_story/blob/main/report_10.md
https://vuldb.com/submit/814567
https://vuldb.com/vuln/365543
https://vuldb.com/vuln/365543/cti
https://github.com/advisories/GHSA-x3r2-vhf8-v655