Skip to content
OpenAdvisories

Product · The Eclipse Foundation

Eclipse Vorto

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2019-10248

    Eclipse Vorto resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS

    Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be i…

    The Eclipse Foundation Eclipse Vorto org.eclipse.vorto:org.eclipse.vorto.core Maven