https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 11:19:16 +0000 https://cve.radiocsirt.org/vuln/cve-2019-17636 <p><strong>Affected:</strong> The Eclipse Foundation Eclipse Theia</p> <p>In Eclipse Theia versions 0.3.9 through 0.15.0, one of the default pre-packaged Theia extensions is &#34;Mini-Browser&#34;, published as &#34;@theia/mini-browser&#34; on npmjs.com. This extension, for its own needs, exposes a HTTP endpoint that allows to read the content of files on the host&#39;s filesystem, given their path, without restrictions on the requester&#39;s origin. This design is vulnerable to being exploited remotely through a DNS rebinding attack or a drive-by download of a carefully crafted exploit.</p> <p><strong>Affected:</strong> The Eclipse Foundation Eclipse Theia</p> <p>In Eclipse Theia versions 0.3.9 through 0.15.0, one of the default pre-packaged Theia extensions is &#34;Mini-Browser&#34;, published as &#34;@theia/mini-browser&#34; on npmjs.com. This extension, for its own needs, exposes a HTTP endpoint that allows to read the content of files on the host&#39;s filesystem, given their path, without restrictions on the requester&#39;s origin. This design is vulnerable to being exploited remotely through a DNS rebinding attack or a drive-by download of a carefully crafted exploit.</p> https://cve.radiocsirt.org/vuln/cve-2019-17636