Aller au contenu
Non notée

CVE-2019-17637 In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external…

Description

In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences.

Produits et versions touchés

Produit Versions touchées Corrigé en
Eclipse Web Tools Platform Versions non publiées
Suivre cette CVE