TIBCO JasperReports <= 7.1.1, 7.2.0, 7.5.0 HTML Injection Vulnerability

TIBCO JasperReports is prone to an HTML injection vulnerability.

JasperReorts contains a vulnerability that allows an attacker to exploit HTML injection to gain full control of a web interface containing the output of the report generator component with the privileges of any user that views the affected report(s). The attacker can exploit this vulnerability when other users view a maliciously generated report, where those reports use Fusion Charts and a data source with contents controlled by the attacker.

TIBCO JasperReports Server 7.1.1 and prior, 7.2.0 and 7.5.0.

Checks if a vulnerable version is present on the target host.

Update to version 7.1.3, 7.2.2, 7.5.1 or later.