Skip to content
OpenAdvisories

Package · Maven

org.eclipse.ditto:ditto

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-5165

    Eclipse Ditto User Interface vulnerable to XSS due to Improper Neutralization of Input

    In Eclipse Ditto versions 3.0.0 to 3.5.5, the user input of several input fields of the Eclipse Ditto Explorer User Interface https://eclipse.dev/ditto/user-interface.html was not properly neutralized and thus vulnerable to both Reflected and Stored XSS (Cros…

    Eclipse Foundation Eclipse Ditto org.eclipse.ditto:ditto Maven