CVE-2023-4218 — XXE in eclipse.platform / Eclipse IDE
In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or upda…
Published: 2023-11-09 · CVSS: 5.0 · CVSS 3.1
In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7