TIBCO JasperReports Library 6.x < 6.3.5/6.4.1/6.4.2/6.4.21/7.1.0/7.2.0 Directory Traversal (CVE-2018-18809)

[MuthuK]

Hi Team,

 

Good morning!

 

I am working on resolving the below “TIBCO JasperReports Library Directory Traversal Vulnerability” in one of our web application. Right now we are using jasperreport 6.1.0 version jar in our java web application, I cannot able to find the required version library- 6.3.5 or higher in your community website. Can you please help suggest?

 

https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-library-2018-18809

Thank you!!

 

Regards

Muthu

[Anuja Vilas Bhujbal]

Hello Muthu,

 

You can download the jar from the below link from the download button after logging in to the website.