The Eclipse Foundation Eclipse BIRT

• CVE-2021-34427 Unrated In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running inst 58.0%