writeups.xyz / Jasper Reports Library Code Injection

Submitter : c2a

Date: 13 June 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• SSTI
• Insecure Deserialization
• Security Code Review

Programs :

• Jasper Reports

Authors :

• Dennis Heinze

Link :
https://insinuator.net/2023/06/jasper-reports-library-code-injection/