writeups.xyz / Remote code execution in BIRT Viewer ≤ 4.12.0 (CVE-2023-0100)

Submitter : c2a

Date: 17 March 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• RFI
• URL Validation Bypass
• Security Code Review

Programs :

• Eclipse Foundation

Authors :

• Louis Wolfers (@TG91aXMK)

Link :
https://www.synacktiv.com/sites/default/files/2023-03/Synacktiv-BIRTViewer-CVE-2023-0100_1.pdf