CVE-2019-17637CWE-611

In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the…

published July 15, 2020

CVSS
—
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00879 · 58.7th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2020-07-15T14:55Z
EPSS history
Timeline
  • 15 JUL 14:55Z
    In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the…
    cvelistv5