EIP-2026-104390
PRE-CVEPentaho BI 1.x - Multiple Cross-Site Scripting / Information Disclosure Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-104390. PoCs published by euronymous.
AI-analyzed exploit summary This is a functional proof-of-concept for a reflected XSS vulnerability in Pentaho BI. The exploit demonstrates how an attacker can inject arbitrary JavaScript code via the 'outputType' parameter, which is then executed in the context of the victim's browser session.
Description
Pentaho BI 1.x - Multiple Cross-Site Scripting / Information Disclosure Vulnerabilities
Exploits (1)
This is a functional proof-of-concept for a reflected XSS vulnerability in Pentaho BI. The exploit demonstrates how an attacker can inject arbitrary JavaScript code via the 'outputType' parameter, which is then executed in the context of the victim's browser session.