CVE-2023-0100: Input Validation
In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. report=http://xyz.com/report.rptdesign). If the host indicated in the report parameter matched the HTTP Host header value, the report would be retrieved. However, the Host header can be tampered with on some configurations where no virtual hosts are put in place (e.g. in the default configuration of Apache Tomcat) or when the default host points to the BIRT server. This vulnerability was patched on Eclipse BIRT 4.13.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Eclipse BIRT vulnerability?
The vulnerability ID for this Eclipse BIRT vulnerability is CVE-2023-0100.
What is the severity of CVE-2023-0100?
The severity of CVE-2023-0100 is high with a severity value of 8.8.
What is the description of CVE-2023-0100?
CVE-2023-0100 is a vulnerability in Eclipse BIRT that allows an attacker to retrieve a report from the same host using an absolute HTTP path for the report parameter.
Which version of Eclipse BIRT is affected by CVE-2023-0100?
Eclipse BIRT versions 2.6.2 to 4.13.0 are affected by CVE-2023-0100.
Is there a fix for CVE-2023-0100?
Yes, a fix for CVE-2023-0100 is available. It is recommended to upgrade to a version of Eclipse BIRT beyond 4.13.0.