CVE-2019-10249CWE-494CWE-829

All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised

published May 6, 2019

CVSS
—
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00651 · 50.5th percentile
Weaknesses
CWE-494 · Download of Code Without Integrity Check; CWE-829 · Inclusion of Functionality from Untrusted Control Sphere
Published
2019-05-06T16:12Z
EPSS history
Timeline
  • 06 MAY 16:12Z
    All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised
    cvelistv5