Eclipse BIRT Viewer - Remote Code Execution

Eclipse BIRT versions 4.8.0 and earlier contain a JSP injection caused by query parameters, letting remote attackers create and access malicious JSP files in the viewer directory, exploit requires sending crafted query parameters. id: CVE-2021-34427 info: name: Eclipse BIRT Viewer - Remote Code...

CVE-2021-34427

CVE-2021-34427 Windows POC for CVE-2021-34427 affecting Birt Viewer Tested on Birt 4.8.0 Built with Claude Based on research here: https://bugs.eclipse.org/bugs/showbug.cgi?id=538142&ref=labs.watchtowr.com & https://sploitus.com/exploit?id=PACKETSTORM:170326...

Exploit for Unrestricted Upload of File with Dangerous Type in Eclipse Business_Intelligence_And_Reporting_Tools

CVE-2021-34427 Windows POC for CVE-2021-34427 affec...

c2birtengine

BIRT File Upload RCE – C2 over HTTPS This repository provides...

VulnCheck KEV: CVE-2021-34427

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote current BIRT viewer dir to inject JSP code into the running instance...

EUVD-2017-7141

Malware in sbrugna...

EUVD-2017-8834

Malware in sbrugna...

EUVD-2019-3444

Malware in sbrugna...

EUVD-2021-21085

Malware in sbrugna...

EUVD-2015-5088

Malware in sbrugna...

EUVD-2013-2913

Malware in sbrugna...

EUVD-2013-3947

Malware in sbrugna...

EUVD-2009-4487

Malware in sbrugna...

EUVD-2020-2520

Malware in sbrugna...

EUVD-2023-0864

Malicious code in bioql PyPI...

EUVD-2022-30041

Malicious code in bioql PyPI...

CVE-2022-25370

Apache OFBiz uses the Birt plugin https://eclipse.github.io/birt-website/ to create data visualizations and reports. In Apache OFBiz release 18.12.05, and earlier versions, by leveraging a vulnerability in Birt https://bugs.eclipse.org/bugs/showbug.cgi?id=538142, an unauthenticated malicious user...

CVE-2022-25371

Apache OFBiz uses the Birt project plugin https://eclipse.github.io/birt-website/ to create data visualizations and reports. By leveraging a bug in Birt https://bugs.eclipse.org/bugs/showbug.cgi?id=538142 it is possible to perform a remote code execution RCE attack in Apache OFBiz, release 18.12....

CVE-2017-17677

BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code...

RHEL 6 : eclipse-birt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - eclipse-birt: RCE on the default configuration of BIRT Viewer CVE-2023-0100 Note that Nessus has not tested for thi...