Joget JasperReports jrxml expression injection RCE

POST plugin service with malicious userview JSON embeds jrxml Runtime.exec in JasperReportsMenu report compilation. """Joget Enterprise JasperReports jrxml expression injection RCE.""" from future import annotations import json import re from urllib.parse import urlencode from kittysploit import...