Skip to content
Not rated

CVE-2019-11776 In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter

Description

In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.

Affected products and versions

Product Affected versions Fixed in
Eclipse BIRT Versions not published
The 2 CVEs of Eclipse BIRT →
Track this CVE