CVE-2023-4218
Published
CVSS v3
5
MEDIUM
CVSS v2
N/A
Affected
9
PROJECTS
Description
In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).
GitHubGitHubEclipse Platform - a comprehensive set of frameworks and common services that collectively provide a powerful software development infrastructure.
GitHubEclipse Platform UI - a comprehensive set of frameworks and common services that collectively provide a powerful software development infrastructure.
GitHubGitHubGitHub