CVE-2020-27219

CVE-2020-27219 affects Eclipse Hawkbit prior to 0.3.0M7. The REST API may return a 404 Not Found JSON response that includes the full, unescaped request path, exposing unsafe characters. This could disclose internal URL structure to an attacker that POSTs to a non-existent resource. Root cause: u...

CVE-2019-10240

Eclipse hawkBit is affected: versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin-based UI over HTTP instead of HTTPS, creating a MITM risk where dependent artifacts could be compromised and infected. Multiple sources (RH, OSV, NVD, Gemein) corroborate that build artifacts may ...