CVE-2017-8315

ALTO 7.5CVE-2017-8315 · Published 20/04/2018 · updated 17/06/2026

En resumen

CVE-2017-8315 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a ide (eclipse).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.6%, mayor que el 76.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
ide eclipse	`= 2017.2.5`	No fix yet

Description

Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.

References

bugs.eclipse.org/bugs/show_bug.cgi · Permissions Required
research.checkpoint.com/parsedroid-targeting-android-development-research-community · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free