Exposure of Sensitive Information to an Unauthorized Actor in LemMinX

MEDIO 5.5CVE-2022-0672 · GHSA-hrxv-694f-22g3 · Published 18/02/2022 · updated 17/06/2026

In breve

CVE-2022-0672 è una vulnerabilità MEDIO (CVSS 5.5) che riguarda org.eclipse.lemminx:lemminx-parent, lemminx (eclipse).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.30%, superiore al 23.1% delle vulnerabilità.
Correzione: aggiornare a 0.19.0 o successiva.

Package	Affected versions	Patched versions
org.eclipse.lemminx:lemminx-parent Maven	`< 0.19.0`	`0.19.0`
lemminx eclipse	`< 0.19.0`	`0.19.0`

Description

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.

NVD description

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.

References

nvd.nist.gov/vuln/detail/CVE-2022-0672 · ADVISORY
eclipse/lemminx#1174 · WEB
eclipse/lemminx commit 076b880 · WEB
eclipse/lemminx · PACKAGE
eclipse/lemminx · WEB

Altre vulnerabilità di org.eclipse.lemminx:lemminx-parent

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.eclipse.lemminx:lemminx-parent

Maven

< 0.19.0

0.19.0

lemminx

eclipse

< 0.19.0

0.19.0

Description

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.

NVD description

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.

Altre vulnerabilità di org.eclipse.lemminx:lemminx-parent

Vedi tutto →