Description
Cross Site Scripting in
UI Request/Response Validation
in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, enticing the user to interact.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TIBCO | JasperReports Server | 8.0 – < 8.0.4, 8.2 – < 8.2.0 | 8.0.4 |
Advisories 1
- WID-SEC-2024-0836 TIBCO JasperReports: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 28, 2024