En resumen
- CVE-2022-0672 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a org.eclipse.lemminx:lemminx-parent, lemminx (eclipse).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.30%, mayor que el 23.1% de las vulnerabilidades.
- Solución: actualizar a 0.19.0 o posterior.
Description
A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.
NVD description
A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.
Más vulnerabilidades de org.eclipse.lemminx:lemminx-parent
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free