CVE-2019-10248CWE-494CWE-829

CVE-2019-10248: vulnerability in The Eclipse Foundation Eclipse Vorto

Published · Updated

Follow this CVE+ Monitor Eclipse Vorto+ Monitor org.eclipse.vorto:org.eclipse.vorto.core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be infected.
Affected products
The Eclipse Foundation · Eclipse Vorto