The Eclipse Foundation Eclipse BIRT (Business Intelligence Reporting Tool)
- CVE-2023-0100 In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.c 0.8%