2020-02-14 21:30:21
hackerone
PUBLISHED
An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.