Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-10249

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rfj2-4g26-7jw5

Potentially compromised builds All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.

gitlab/maven/org.eclipse.xtend/org.eclipse.xtend.core/CVE-2019-10249

Missing Encryption of Sensitive Data Xtext & Xtend were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.

gitlab/maven/org.eclipse.xtext/org.eclipse.xtext/CVE-2019-10249

Improper Encoding or Escaping of Output All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.

gitlab/maven/org.eclipse.xtext/org.eclipse.xtext.java/CVE-2019-10249

Inclusion of Functionality from Untrusted Control Sphere Xtext & Xtend were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.