説明
Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be infected.
AI分析AIによる分析
影響を受ける製品
eclipsevorto
参照
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=546622Third Party Advisory
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=546622Third Party Advisory