VYPR

rpm package

suse/eclipse-emf-bootstrap&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5

pkg:rpm/suse/eclipse-emf-bootstrap&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5

Vulnerabilities (1)

  • CVE-2023-4218Nov 9, 2023
    affected < 2.22.0-150200.4.9.3fixed 2.22.0-150200.4.9.3

    In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).