Hacking JasperReports – The Hidden Shell Feature By @breenmachine

Other

The purpose of JasperReports is to pull in data from various sources (databases, xml, flat files, etc…), aggregate it in some way, and spit out a pretty report based on some sort of user-defined template. Templates in JasperReports are defined in “JRXML” files that can be uploaded by any user allowed to create or edit reports.

https://foxglovesecurity.com/2016/10/14/hacking-jasperreports-the-hidden-shell-feature/