Read the docs
TI-2008-02141 Aliases CVE-2008-2230GHSA-8rmr-5233-3q25

Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng…

Priority LOW 22CWE-94Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-94.

Summary

Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory.

Why it matters now

EPSS 0.00525 44th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 41

CPEVersionsRoleVendor
cpe:2.3:a:reportbug-ng:reportbug:3.8:*:*:*:*:*:*:*3.8VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug:3.31:*:*:*:*:*:*:*3.31VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.10:*:*:*:*:*:*:*0.2007.03.10VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.11:*:*:*:*:*:*:*0.2007.03.11VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.13:*:*:*:*:*:*:*0.2007.03.13VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.14:*:*:*:*:*:*:*0.2007.03.14VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.15:*:*:*:*:*:*:*0.2007.03.15VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.17:*:*:*:*:*:*:*0.2007.03.17VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.19:*:*:*:*:*:*:*0.2007.03.19VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.19.2:*:*:*:*:*:*:*0.2007.03.19.2VulnerableReportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug:3.8:*:*:*:*:*:*:* Versions 3.8 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug:3.31:*:*:*:*:*:*:* Versions 3.31 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.10:*:*:*:*:*:*:* Versions 0.2007.03.10 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.11:*:*:*:*:*:*:* Versions 0.2007.03.11 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.13:*:*:*:*:*:*:* Versions 0.2007.03.13 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.14:*:*:*:*:*:*:* Versions 0.2007.03.14 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.15:*:*:*:*:*:*:* Versions 0.2007.03.15 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.17:*:*:*:*:*:*:* Versions 0.2007.03.17 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.19:*:*:*:*:*:*:* Versions 0.2007.03.19 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.19.2:*:*:*:*:*:*:* Versions 0.2007.03.19.2 Vulnerable ·Reportbug-ng
Show 31 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.20:*:*:*:*:*:*:*0.2007.03.20VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.24:*:*:*:*:*:*:*0.2007.03.24VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.27:*:*:*:*:*:*:*0.2007.03.27VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.28:*:*:*:*:*:*:*0.2007.03.28VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.29:*:*:*:*:*:*:*0.2007.03.29VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.07:*:*:*:*:*:*:*0.2007.04.07VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.07.2:*:*:*:*:*:*:*0.2007.04.07.2VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.13:*:*:*:*:*:*:*0.2007.04.13VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.16:*:*:*:*:*:*:*0.2007.04.16VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.20:*:*:*:*:*:*:*0.2007.04.20VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.23:*:*:*:*:*:*:*0.2007.04.23VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.27:*:*:*:*:*:*:*0.2007.04.27VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.02:*:*:*:*:*:*:*0.2007.05.02VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.27:*:*:*:*:*:*:*0.2007.05.27VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.28:*:*:*:*:*:*:*0.2007.05.28VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.31:*:*:*:*:*:*:*0.2007.05.31VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.06.13:*:*:*:*:*:*:*0.2007.06.13VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.06.27:*:*:*:*:*:*:*0.2007.06.27VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.08:*:*:*:*:*:*:*0.2007.07.08VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.12:*:*:*:*:*:*:*0.2007.07.12VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.18:*:*:*:*:*:*:*0.2007.07.18VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.19:*:*:*:*:*:*:*0.2007.07.19VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.02:*:*:*:*:*:*:*0.2007.08.02VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.03:*:*:*:*:*:*:*0.2007.08.03VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.03.2:*:*:*:*:*:*:*0.2007.08.03.2VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.12:*:*:*:*:*:*:*0.2007.08.12VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.20:*:*:*:*:*:*:*0.2007.08.20VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.10.30:*:*:*:*:*:*:*0.2007.10.30VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2008.01.20:*:*:*:*:*:*:*0.2008.01.20VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2008.03.26:*:*:*:*:*:*:*0.2008.03.26VulnerableReportbug-ng
cpe:2.3:a:reportbug-ng:reportbug-ng:0.2008.03.28:*:*:*:*:*:*:*0.2008.03.28VulnerableReportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.20:*:*:*:*:*:*:* Versions 0.2007.03.20 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.24:*:*:*:*:*:*:* Versions 0.2007.03.24 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.27:*:*:*:*:*:*:* Versions 0.2007.03.27 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.28:*:*:*:*:*:*:* Versions 0.2007.03.28 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.29:*:*:*:*:*:*:* Versions 0.2007.03.29 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.07:*:*:*:*:*:*:* Versions 0.2007.04.07 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.07.2:*:*:*:*:*:*:* Versions 0.2007.04.07.2 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.13:*:*:*:*:*:*:* Versions 0.2007.04.13 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.16:*:*:*:*:*:*:* Versions 0.2007.04.16 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.20:*:*:*:*:*:*:* Versions 0.2007.04.20 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.23:*:*:*:*:*:*:* Versions 0.2007.04.23 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.27:*:*:*:*:*:*:* Versions 0.2007.04.27 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.02:*:*:*:*:*:*:* Versions 0.2007.05.02 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.27:*:*:*:*:*:*:* Versions 0.2007.05.27 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.28:*:*:*:*:*:*:* Versions 0.2007.05.28 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.31:*:*:*:*:*:*:* Versions 0.2007.05.31 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.06.13:*:*:*:*:*:*:* Versions 0.2007.06.13 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.06.27:*:*:*:*:*:*:* Versions 0.2007.06.27 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.08:*:*:*:*:*:*:* Versions 0.2007.07.08 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.12:*:*:*:*:*:*:* Versions 0.2007.07.12 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.18:*:*:*:*:*:*:* Versions 0.2007.07.18 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.19:*:*:*:*:*:*:* Versions 0.2007.07.19 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.02:*:*:*:*:*:*:* Versions 0.2007.08.02 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.03:*:*:*:*:*:*:* Versions 0.2007.08.03 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.03.2:*:*:*:*:*:*:* Versions 0.2007.08.03.2 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.12:*:*:*:*:*:*:* Versions 0.2007.08.12 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.20:*:*:*:*:*:*:* Versions 0.2007.08.20 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.10.30:*:*:*:*:*:*:* Versions 0.2007.10.30 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2008.01.20:*:*:*:*:*:*:* Versions 0.2008.01.20 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2008.03.26:*:*:*:*:*:*:* Versions 0.2008.03.26 Vulnerable ·Reportbug-ng
  • cpe:2.3:a:reportbug-ng:reportbug-ng:0.2008.03.28:*:*:*:*:*:*:* Versions 0.2008.03.28 Vulnerable ·Reportbug-ng

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-2230
  2. 2026-10-03 Alias added: GHSA-8rmr-5233-3q25

References

Exploit 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences