Reflected XSS Vulnerability in Eclipse BIRT Report Viewer
CVE-2019-11776

6.1MEDIUM

Key Information:

Vendor

The Eclipse Foundation

Status
Eclipse Birt
Vendor
CVE Published:
9 August 2019

What is CVE-2019-11776?

Eclipse BIRT versions 1.0 to 4.7 are susceptible to Reflected Cross-Site Scripting (XSS) attacks via manipulated URL parameters in the Report Viewer. This enables attackers to inject malicious scripts that are executed in the context of the user's browser, potentially compromising sensitive information or leading to further exploitation.

Affected Version(s)

Eclipse BIRT 1.0 to 4.7

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=546816
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.