Exposure of Sensitive Information to an Unauthorized Actor in LemMinX

MITTEL 5.5CVE-2022-0672 · GHSA-hrxv-694f-22g3 · Published 18/02/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-0672 ist eine Schwachstelle (MITTEL (CVSS 5.5)) in org.eclipse.lemminx:lemminx-parent, lemminx (eclipse).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.30%, höher als bei 23.2% aller Schwachstellen.
Abhilfe: auf 0.19.0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
org.eclipse.lemminx:lemminx-parent Maven	`< 0.19.0`	`0.19.0`
lemminx eclipse	`< 0.19.0`	`0.19.0`

Description

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.

NVD description

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.

References

nvd.nist.gov/vuln/detail/CVE-2022-0672 · ADVISORY
eclipse/lemminx#1174 · WEB
eclipse/lemminx commit 076b880 · WEB
eclipse/lemminx · PACKAGE
eclipse/lemminx · WEB

Weitere Schwachstellen in org.eclipse.lemminx:lemminx-parent

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.eclipse.lemminx:lemminx-parent

Maven

< 0.19.0

0.19.0

lemminx

eclipse

< 0.19.0

0.19.0

Description

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.

NVD description

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.

Weitere Schwachstellen in org.eclipse.lemminx:lemminx-parent

Alle anzeigen →