Eclipse Ditto vulnerabilities
We track 1 vulnerability in Eclipse Ditto products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 8, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Eclipse Ditto vulnerabilities
- 7.1 High severity
Ditto Explorer UI: External Control of System or Configuration Setting
In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including the Ditto API URI and the OpenID Connect (OIDC) provider settings, from an arbitrary cross-origin URL supplied in the en