Kurz gesagt
- CVE-2020-27219 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in org.eclipse.hawkbit:hawkbit-parent, hawkbit (eclipse).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.83%, höher als bei 57.7% aller Schwachstellen.
- Abhilfe: auf 0.3.0M7 oder neuer aktualisieren.
Description
In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.
NVD description
In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.
Weitere Schwachstellen in org.eclipse.hawkbit:hawkbit-parent
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free