Debian/eclipse-wtp: high 7.1
In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server
Action: Upgrade eclipse-wtp to 3.18-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.18-1 | - |
Fixed versions
| 3.18-1 |
Sources
- osv: DEBIAN-CVE-2019-17637#Debian:14/eclipse-wtp
- https://security-tracker.debian.org/tracker/CVE-2019-17637
published · modified · JSON