5.0
Moyenne
CVE-2023-4218 In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE…
Description
In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Eclipse IDE 2023 | premières → < 2023-09 | 2023-09 |
| org.eclipse.core.runtime 3.29 | premières → < 3.29.0 | 3.29.0 |
| org.eclipse.pde 3.13 | premières → 3.13.2400 | Pas de correctif indiqué |