CVE-2024-3325: JasperReports Server Driver upload vulnerability
Published Jul 10, 2024
·Updated
Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.
Affected Software
4 affected components
Jaspersoft JasperReports Server>=8.0.4<=9.0.0
Cloud Jasperreports Server<=8.0.4
Cloud Jasperreports Server=8.2.0
Cloud Jasperreports Server=9.0.0
Event History
Jul 10, 2024
CVE Published
via MITRE·05:02 PM
Data Sourced
via MITRE·05:02 PM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-3325?
CVE-2024-3325 is classified as a high severity vulnerability affecting certain versions of Jaspersoft JasperReport Servers.
2
How do I fix CVE-2024-3325?
To fix CVE-2024-3325, update your JasperReports Server to a version later than 9.0.0.
3
What versions are affected by CVE-2024-3325?
CVE-2024-3325 affects Jaspersoft JasperReport Servers from version 8.0.4 through 9.0.0.
4
What impact does CVE-2024-3325 have on my system?
CVE-2024-3325 may allow unauthorized access or execution of malicious code on affected Jaspersoft JasperReport Servers.
5
Is there a workaround for CVE-2024-3325?
There is no known workaround for CVE-2024-3325; the recommended action is to upgrade to a secure version.