Skip to content
OpenAdvisories

Product · Eclipse Foundation

EDC

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2024-4536

    Eclipse EDC: OAuth2 Credential Exfiltration Vulnerability

    In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component ( https://github.com/eclipse-edc/Connector ), an attacker might obtain OAuth2 client secrets from the vault. In Eclipse Dataspace Components from version 0.2.1 to 0.6.…

    Eclipse Foundation EDC org.eclipse.edc:connector-core Maven