What the vulnerability does
01Description
In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.
CVSS base score
—
Key dates
02Disclosure timeline
June 25, 2021
CVE published
August 4, 2024
Record updated
External resources
