CVE-2008-2230: Reportbug-NG Reportbug

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory.

Affected products

• Reportbug-NG Reportbug: version 3.8 only; version 3.31 only
• Reportbug-NG Reportbug-NG: version 0.2007.03.10 only; version 0.2007.03.11 only; version 0.2007.03.13 only; version 0.2007.03.14 only; version 0.2007.03.15 only; version 0.2007.03.17 only; …

Published 2008-06-11. Last modified 2026-06-16.