Kura Security Vulnerabilities and Issues — Kura CVE List

Lucene search

EclipseKura

2 matches found

CVE•added 2019/04/09 4:29 p.m.•36 views

CVE-2019-10243

In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.

5.3CVSS5.1AI score0.00174EPSS

CVE•added 2019/04/09 4:29 p.m.•31 views

CVE-2019-10242

In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests for a limited number of file types.

5.3CVSS5.2AI score0.00929EPSS