Eclipse Community Forums: BIRT » Will vulnerability be addressed in v4.9?

Help

Home

Home » Archived » BIRT » Will vulnerability be addressed in v4.9?(Security Question)

Show: Today's Messages :: Show Polls :: Message Navigator

Will vulnerability be addressed in v4.9? [message #1843419]

Wed, 28 July 2021 15:28

Cassie Redmon

Messages: 1
Registered: July 2021

Junior Member

When looking into using BIRT for our organization, our team ran across this vulnerability on the National Vulnerability Database:

"In Eclipse BIRT version 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance."

Is this something that will be addressed in v4.9 or is there a preventative measure we can take for v4.8?

Thanks!

Report message to a moderator

Previous Topic:	Change display text on parameter
Next Topic:	NULL issue

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Apr 19 07:56:13 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter