CVE-2019-10249
on github
Published
Severity
CVSS v3:
8.1 HIGH
CVSS v2:
6.8 MEDIUM
Description
All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.
References
Configurations
| CPE23 | Version Start | Version End | Exact Version |
|---|---|---|---|
| cpe:2.3:a:eclipse:xtend:*:*:*:*:*:*:*:* | n/a | 2.18.0 | * |
| cpe:2.3:a:eclipse:xtext:*:*:*:*:*:*:*:* | n/a | 2.18.0 | * |