CVE-2020-27219CWE-79

In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within…

published January 14, 2021

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00835 · 57.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-01-14T22:20Z
EPSS history
Timeline
  • 14 JAN 22:20Z
    In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within…
    cvelistv5