Not rated
CVE-2021-34427 In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is…
Description
In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Eclipse BIRT 4.8 | earliest → 4.8.0 | No fix stated |