The Eclipse Foundation Eclipse Vorto vulnerabilities

1 vulnerability

Known vulnerabilities in The Eclipse Foundation Eclipse Vorto, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.1CVE-2019-10248eclipsevorto+2
EPSS score
0.43%
Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be infected.