CVE-2019-10244

2019-04-0915:42:42

CWE-611

eclipse

www.cve.org

0.001 Low

EPSS

Percentile

49.9%

JSON

In Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis simple Mqtt component and the emulator position service (not part of the device distribution) could potentially be target of XXE attack due to an improper factory and parser initialisation.

CNA Affected

[
  {
    "product": "Eclipse Kura",
    "vendor": "The Eclipse Foundation",
    "versions": [
      {
        "lessThanOrEqual": "4.0.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/107844

bugs.eclipse.org/bugs/show_bug.cgi?id=545835

0.001 Low

EPSS

Percentile

49.9%

JSON

Related for CVELIST:CVE-2019-10244