NetSight
high8.1

CVE-2019-10249

All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.

Impact

All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.

Affected products

VendorProductAffected versions
EclipseXtend
before 2.18.0
EclipseXtext
before 2.18.0

Weakness classification

References