CVE-2023-0100: 
Java vulnerability analysis and mitigation

CVE-2023-0100 is a security vulnerability discovered in the BIRT Viewer application that affects its default configuration. The vulnerability was discovered during a security assessment and reported on July 18, 2022. The issue affects the BIRT Viewer's report path handling mechanism and could potentially allow authenticated attackers to execute commands on the underlying server (Eclipse Bug).

The vulnerability stems from BIRT Viewer's use of the Host header to verify if the __report parameter is pointing to the current domain. An attacker can modify the Host header, and the request would still be processed on poorly configured Apache servers, particularly when no virtual hosts are defined. This vulnerability is exploitable in the default configuration of both Apache Tomcat and BIRT (Eclipse Bug).

The vulnerability could allow authenticated attackers to execute commands on the underlying server through the manipulation of report paths and Host headers. This could potentially lead to remote code execution in systems using the default configuration (Eclipse Bug).

The vulnerability was fixed in BIRT version 4.13, released in March 2023. The fix includes setting 'none' as the default value for the URL_REPORT_PATH_POLICY parameter and implementing stricter validation of report domains. Users are advised to upgrade to this version or later (Eclipse Bug).