CVE-2019-10249
8.1HIGHAll Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.
Published: 5/6/2019Updated: 11/21/2024
Description
All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.
AI AnalysisPowered by AI
Affected Products
eclipsextend
eclipsextext
References
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=546996Issue TrackingVendor Advisory
- https://github.com/eclipse/xtext-xtend/issues/759ExploitIssue TrackingThird Party Advisory
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=546996Issue TrackingVendor Advisory
- https://github.com/eclipse/xtext-xtend/issues/759ExploitIssue TrackingThird Party Advisory