CVE-2021-34427

2021-06-2519:15:09

Google

osv.dev

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.2%

JSON

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.

CPENameOperatorVersion
birteqBIRT_4_7_0_Release_201706222054
birteq201301142301
birteq201304100954
birteq201303151606
birteq201305161434
birteqBIRT_4_2_0_RC3_201206051006
birteq201305291555
birteq201303291417
birteq201409051448
birteq201305231611

Name	Operator	Version
birt	eq	BIRT_4_7_0_Release_201706222054
birt	eq	201301142301
birt	eq	201304100954
birt	eq	201303151606
birt	eq	201305161434
birt	eq	BIRT_4_2_0_RC3_201206051006
birt	eq	201305291555
birt	eq	201303291417
birt	eq	201409051448
birt	eq	201305231611