Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: jsreport Clear all filters
TI-2023-02413 CVE-2023-2583 · GHSA-g7rj-q722-245g

Code Injection in jsreport/jsreport

Priority HIGH 82

Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01128 Published 2023-05-08 Fixed in 3.11.3 CWE-94
TI-2020-06280 CVE-2020-7763 · GHSA-6h7f-qwqm-35pp

Arbitrary file read in phantom-html-to-pdf

Priority LOW 36

This affects the package phantom-html-to-pdf before 0.6.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01618 Published 2020-11-05 Fixed in 0.6.1, 0.6.2 CWE-22
TI-2020-06279 CVE-2020-7762 · GHSA-934w-hvj4-7fr6

Arbitrary file read in jsreport-chrome-pdf

Priority LOW 32

This affects the package jsreport-chrome-pdf before 1.10.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01621 Published 2020-11-05 Fixed in 1.10.0 CWE-22
TI-2020-06546 CVE-2020-8128 · GHSA-5fjj-cfh2-ghc5

Server-side request forgery in jsreport

Priority MEDIUM 47

An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02692 Published 2020-02-14 Fixed in 2.6.0 CWE-829