Skip to content
OpenAdvisories

Product · Eclipse Foundation

Eclipse RAP

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2023-4760

    Remote Code Execution in Eclipse RAP on Windows

    In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component. The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileNam…

    Eclipse Foundation Eclipse RAP