Skip to content
OpenAdvisories

Package · Maven

org.eclipse.kura:org.eclipse.kura.web2

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    Eclipse Kura LogServlet vulnerability

    In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escala…