← Back

Org.eclipse.core.runtime

org.eclipse.core.runtime

Vendor: Eclipse • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-4218
1Eclipse
3Eclipse Ide
Org.eclipse.core.runtimePde
Jun 17, 2026
Nov 9, 2023
N/A· v4
5.0 MEDIUM· v3
N/A· v2
In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (...Show more
In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch). Show less