CVE-2019-10242CWE-22

CVE-2019-10242: vulnerability in The Eclipse Foundation Eclipse Kura

Published · Updated

Follow this CVE+ Monitor Eclipse Kura

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.0%
In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests for a limited number of file types.
Affected products
The Eclipse Foundation · Eclipse Kura
Related CVEs — The Eclipse Foundation Eclipse Kura

In the same product, most dangerous first.

CVE-2019-10244—CVE-2019-10244EPSS 1.8%CVE-2019-10243—CVE-2019-10243EPSS 1.3%