CVE-2019-10249

2019-05-0616:12:09

CWE-494

CWE-829

eclipse

www.cve.org

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

64.7%

JSON

All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.

CNA Affected

[
  {
    "product": "Eclipse Xtext",
    "vendor": "The Eclipse Foundation",
    "versions": [
      {
        "lessThan": "2.18.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]