CVE-2023-4760

In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component. The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileNameString name method. As soon as this...

CVE-2023-4760: Improper Limitation of a Pathname to a Restricted Directory

In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component. The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileNameString name method. As soon as this...

PT-2023-6508

Name of the Vulnerable Software and Affected Versions Eclipse RAP versions 3.0.0 through 3.25.0 Description The issue is related to a not completely secure extraction of the file name in the FileUploadProcessor.stripFileNameString name method. This allows for Remote Code Execution on Windows when...