Lucene search
GitHub Advisory DatabaseGHSA-RCVX-RMVF-MXCHHistoryFeb 09, 2022 - 10:19 p.m.
Cross-site Scripting in Eclipse Hawkbit
2022-02-0922:19:44
CWE-79
GitHub Advisory Database
github.com
14
0.001 Low
EPSS
Percentile
31.7%
In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.eclipse.hawkbit:hawkbit-parent | le | 0.3.0M6 |
Related
prion
prion
Design/Logic Flaw
2021-01-14 23:15:00
cvelist
cvelist
CVE-2020-27219
2021-01-14 22:20:13
osv
osv
CVE-2020-27219
2021-01-14 23:15:12
Cross-site Scripting in Eclipse Hawkbit
2022-02-09 22:19:44
cve
cve
CVE-2020-27219
2021-01-14 23:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2021-01-18 04:49:06