Debian/eclipse-wtp: high 7.1
In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server
Action: Upgrade eclipse-wtp to 3.18-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.18-1 | - |
Fixed versions
| 3.18-1 |
Sources
published · modified · JSON