In breve
- CVE-2020-27219 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda org.eclipse.hawkbit:hawkbit-parent, hawkbit (eclipse).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.83%, superiore al 57.7% delle vulnerabilità.
- Correzione: aggiornare a 0.3.0M7 o successiva.
Description
In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.
NVD description
In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.
Altre vulnerabilità di org.eclipse.hawkbit:hawkbit-parent
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free