CVE-2019-10242

In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests for a limited number of file types...

CVE-2019-10242

The provided CVE entry applies to Eclipse Kura up to version 4.0.0, where the SkinServlet did not validate the path parameter in GET requests. This could allow path traversal for a limited set of file types. The vulnerability is described without explicit exploitation details or listed fixes in t...