← CVE Intelligence

CVE-2019-10242

The Eclipse Foundation / Eclipse Kura PUBLISHED

Description (CNA)

In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests for a limited number of file types.

Affected (CNA)

Vendor / productVersions
The Eclipse Foundation / Eclipse Kuraaffected unspecified through 4.0.0

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.