CVE-2019-17637
CVE-2019-17637
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Jul 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences.
Affected products
The Eclipse Foundation · Eclipse Web Tools PlatformWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →