Read the docs

jsreport

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

jsreport records in CISA KEV

No jsreport vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jsreport 2 records HIGH Jsreport-chrome-pdf 1 record LOW Phantom-html-to-pdf 1 record LOW

Records

2 records in Jsreport · all components

TI-2023-02413 CVE-2023-2583 · GHSA-g7rj-q722-245g

Code Injection in jsreport/jsreport

Priority HIGH 82

Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01128 Published 2023-05-08 Fixed in 3.11.3 CWE-94
TI-2020-06546 CVE-2020-8128 · GHSA-5fjj-cfh2-ghc5

Server-side request forgery in jsreport

Priority MEDIUM 47

An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02692 Published 2020-02-14 Fixed in 2.6.0 CWE-829
Open these records in search →