Security Advisory

CVE-2024-3323

8.3
HIGH

Vulnerability Description

Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, enticing the user to interact.
Published Date April 17, 2024
Official Source NIST NVD Advisory