org.eclipse.hawkbit:hawkbit-parent

2 results · Feed

• Medium 6.1
  CVE-2020-27219 Public exploit

  Cross-site Scripting in Eclipse Hawkbit

  In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from …

  The Eclipse Foundation Eclipse hawkBit org.eclipse.hawkbit:hawkbit-parent Maven
  Jan 14, 2021
• High 8.1
  CVE-2019-10240

  Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

  Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit m…

  The Eclipse Foundation Eclipse hawkBit org.eclipse.hawkbit:hawkbit-parent org.eclipse.hawkbit:hawkbit-boot-starter Maven
  Apr 3, 2019