Eclipse BaSyx AAS Web UI vulnerabilities
1 known vulnerability in Eclipse BaSyx AAS Web UI from Eclipse Foundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score
Latest first
- 8.3 High severity
Eclipse BaSyx AAS Web UI: Insertion of Sensitive Information Into Sent Data
In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's `Authorization` header to outgoing requests without checking the destination origin. In deployments using authen