Description (CNA)
All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Eclipse Foundation / Eclipse Xtext | affected unspecified before 2.18.0 |
CWE
CWE-829, CWE-494
References
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=546996
- https://github.com/eclipse/xtext-xtend/issues/759
ADP enrichment
No English description supplied.