Most recent entries from all

EUVD-2026-161191

fkie_cve-2023-4218

In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).

GHSA-j24h-xcpc-9jw8 — Eclipse IDE XXE in eclipse.platform

Affected: Maven: org.eclipse.platform:org.eclipse.core.runtime, Maven: org.eclipse.platform:org.eclipse.platform, Maven: org.eclipse.platform:org.eclipse.jface, Maven: org.eclipse.platform:org.eclipse.ui.forms, Maven: org.eclipse.platform:org.eclipse.ui.ide, Maven: org.eclipse.platform:org.eclipse.ui.workbench, Maven: org.eclipse.platform:org.eclipse.urischeme, Maven: org.eclipse.jdt:org.eclipse.jdt.ui

### Impact xml files like ".project" are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).

Vulnerablility was found by static code analysis (SonarLint).

Example `.project` file: ``` <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE price [ <!ENTITY xxe SYSTEM "http://127.0.0.1:49416/evil">]> <projectDescription> <name>p</name> <comment>&xxe;</comment> </projectDescription> ```

### Patches Similar patches including junit test that shows the vulnerability have already applied to PDE (see https://github.com/eclipse-pde/eclipse.pde/pull/667). A solution to platform should be the same: just reject parsing any XML that contains any `DOCTYPE`.

### Workarounds No known workaround. User can only avoid to get/open any foreign files with eclipse. Firewall rules against loss of data (but not against XML bomb).

### References https://cwe.mitre.org/data/definitions/611.html https://rules.sonarsource.com/java/RSPEC-2755 https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/8 (Report for multiple projects affected)

gsd-2023-4218

openSUSE-SU-2024:13786-1 — eclipse-contributor-tools-4.15-13.1 on GA media

eclipse-contributor-tools-4.15-13.1 on GA media

UBUNTU-CVE-2023-4218

Affected: Ubuntu:16.04:LTS: eclipse, Ubuntu:18.04:LTS: eclipse

WID-SEC-W-2023-3034 — Eclipse IDE: Schwachstelle ermöglicht Offenlegung von Informationen

Ein lokaler Angreifer kann eine Schwachstelle in Eclipse IDE ausnutzen, um Informationen offenzulegen.