Unscored CVE-2019-11776 EUVD-2019-3444GHSA-vc5c-m6jv-5r6q

In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's …

Published Aug 9, 2019 · Updated Aug 4, 2024 · Assigned by eclipse

Vendor: The Eclipse Foundation Product: Eclipse BIRT

Description

In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.

Affected products

Vendor	Product	Affected	Fixed
The Eclipse Foundation	Eclipse BIRT	1.0 to 4.7	—

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=546816