| Package | Affected versions | Patched versions |
|---|---|---|
| org.eclipse.hawkbit:hawkbit-parent | < 0.3.0M7 | 0.3.0M7 |
| hawkbit | = 0.3.0≤ 0.2.5 |
In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free