CVE-2021-34427

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

57.98% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-434

Published

2021-06-25

Updated

2024-08-04

Proof-of-concept exploits (4)

• http://packetstormsecurity.com/files/170326/Eclipse-Business-Intelligence-Reporting-Tool-…
• http://seclists.org/fulldisclosure/2022/Dec/30
• https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142
• rt1252/CVE-2021-34427

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34427.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2021-3441
• CVE-2021-34428
• CVE-2021-3438
• CVE-2021-34429
• CVE-2021-34371
• CVE-2021-34430