GitHub Advisoryadvisory · Maven

GHSA-4grc-q4fj-45p8 Improper Input Validation In Eclipse BIRT

HIGH Published 2023-03-15 Modified 2023-03-22 Official page ↗
Aliases
CVE-2023-0100
Ecosystem
Maven
Packages
org.eclipse.birt:org.eclipse.birt.report.viewer
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20
Reviewed
2023-03-16

Affected packages

• Maven org.eclipse.birt:org.eclipse.birt.report.viewer: >= 2.6.2, < 4.13 → fixed in 4.13

Description

In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.com/report.rptdesign). If the host indicated in the __report parameter matched the HTTP Host header value, the report would be retrieved. However, the Host header can be tampered with on some configurations where no virtual hosts are put in place (e.g. in the default configuration of Apache Tomcat) or when the default host points to the BIRT server. This vulnerability was patched on Eclipse BIRT 4.13.

Related

Alias · CVE (1)

  • CVE-2023-0100 In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References