CVE-2021-31599

Publication date

2021-11-08 03:24:49

Family

mitre

State

PUBLISHED

Description

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A reports (.prpt) file allows the inclusion of BeanShell scripts to ease the production of complex reports. An authenticated user can run arbitrary code.