CVE-2019-10249

HIGH

8.1

Description

All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.

CVE Details

CVSS v3.1 Score8.1

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityHIGH

Privileges RequiredNONE

User InteractionNONE

Published5/6/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

eclipse:xtendeclipse:xtext

Weaknesses (CWE)

CWE-494CWE-829CWE-116

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=546996(emo@eclipse.org)

https://github.com/eclipse/xtext-xtend/issues/759(emo@eclipse.org)

https://bugs.eclipse.org/bugs/show_bug.cgi?id=546996(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/eclipse/xtext-xtend/issues/759(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.