Beveiligingsadvies

CVE-2023-4218

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-09 08:26:51
Laatst bijgewerkt 2024-09-03 19:26:14
Toegewezen door eclipse
CVSS-score 5.0
Status PUBLISHED

Beschrijving

In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).