-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.eclipse.birt:org.eclipse.birt.report.viewer | maven | >= 2.6.2, < 4.13 | 4.13 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from improper host validation when processing the __report parameter. The patch in PR #1165 modified how the server's hostname is determined (switching from Host header to server configuration). The ReportServiceServlet.processRequest is the logical entry point for report handling, where this validation would occur. The high confidence comes from the direct correlation between the vulnerability description, the fix's nature (hardening host validation), and the typical structure of BIRT's request handling flow.
JavaJavaOngoing coverage of React2Shell