Eclipse RAP vulnerabilities

1 known vulnerability in Eclipse RAP from Eclipse Foundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Eclipse RAP: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-4760Sep 21, 2023Eclipse FoundationEPSS 1.25%

  In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component. The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileName