Eclipse Vorto versions before 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be infected.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
eclipse vorto |