PT-2026-68121

Name of the Vulnerable Software and Affected Versions Eclipse Theia versions prior to 1.73.2 Description The @theia/filesystem backend exposes HTTP file-download endpoints GET /file, GET /files/, and PUT /files/ that convert a client-supplied URI directly to a filesystem path and stream the file...

CVE-2014-8174: Exposure of Sensitive Information to an Unauthorized Actor

eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files...