CVE-2023-2583

Code Injection in jsreport/jsreport

Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3.

Affected

jsreport · jsreport/jsreport

CVSS v3.1 NVD

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS v3.0 HUNTR

10.0 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

1.13% chance of exploitation in the next 30 days, 66th percentile

Published

2023-05-08

Updated

2025-01-28

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/397ea68d-1e28-44ff-b830-c8883d067d96

Security advisories

• advisories/GHSA-g7rj-q722-245g
• jsreport/jsreport/commit/afaff3804b34b38e959f5ae65f9e672088de13d7

References

• CVE Record
• NVD entry