Read the docs

jsreport

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

jsreport records in CISA KEV

No jsreport vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jsreport 2 records HIGH Jsreport-chrome-pdf 1 record LOW Phantom-html-to-pdf 1 record LOW

Records

4 records

TI-2023-02413 CVE-2023-2583 · GHSA-g7rj-q722-245g

Code Injection in jsreport/jsreport

Priority HIGH 82

Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01128 Published 2023-05-08 Fixed in 3.11.3 CWE-94
TI-2020-06546 CVE-2020-8128 · GHSA-5fjj-cfh2-ghc5

Server-side request forgery in jsreport

Priority MEDIUM 47

An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02692 Published 2020-02-14 Fixed in 2.6.0 CWE-829
TI-2020-06280 CVE-2020-7763 · GHSA-6h7f-qwqm-35pp

Arbitrary file read in phantom-html-to-pdf

Priority LOW 36

This affects the package phantom-html-to-pdf before 0.6.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01618 Published 2020-11-05 Fixed in 0.6.1, 0.6.2 CWE-22
TI-2020-06279 CVE-2020-7762 · GHSA-934w-hvj4-7fr6

Arbitrary file read in jsreport-chrome-pdf

Priority LOW 32

This affects the package jsreport-chrome-pdf before 1.10.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01621 Published 2020-11-05 Fixed in 1.10.0 CWE-22
Open these records in search →