Package · Maven

org.eclipse.edc:transfer-data-plane

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.0

CVE-2024-8642

Eclipse EDC: Consumer pull transfer token validation checks not applied

In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass the check for token…

Eclipse Foundation Eclipse EDC Connector org.eclipse.edc:transfer-data-plane Maven

Sep 11, 2024