VYPR

rpm package

suse/maven-surefire&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5

pkg:rpm/suse/maven-surefire&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5

Vulnerabilities (1)

  • CVE-2023-4218Nov 9, 2023
    affected < 2.22.2-150200.3.9.9.1fixed 2.22.2-150200.3.9.9.1

    In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).