CVE-2009-4521

MEDIO 4.3CVE-2009-4521 · Published 31/12/2009 · updated 16/06/2026

In breve

CVE-2009-4521 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda birt (eclipse).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.5%, superiore al 89.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
birt eclipse	`≤ 2.3.2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT) before 2.5.0, as used in KonaKart and other products, allows remote attackers to inject arbitrary web script or HTML via the __report parameter.

References

antisnatchor.com/2008/12/18/eclipse-birt-reflected-xss · Exploit
secunia.com/advisories/37025 · Vendor Advisory
osvdb.org/58941
securityfocus.com/archive/1/507172/100/0/threaded
securityfocus.com/bid/36674 · Exploit
bugs.eclipse.org/bugs/show_bug.cgi · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/53773

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free