Skip to content
OpenAdvisories

Product · Eclipse Foundation

Eclipse BaSyx

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.6

    Eclipse BaSyx Java Server SDK vulnerable to Server-Side Request Forgery

    In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to e…