Xml Server Project
Approved changes feed: RSS · Atom
cpe:2.3:a:xml_language_server_project:xml_server_project:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Xml Language Server Project (29f9fcf2-b155-5731-9c48-5355290616f0) |
|---|---|
| Product | Xml Server Project (e7911487-ab7f-5ba7-a538-34d6fe09dc06) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/eclipse/lemminx |
purl2cpe | 2026-06-01 10:11:57.802297 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-18213 |
vulnerable | 2026-06-08 05:13:11.032128 |
Details available
XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows XXE via a crafted XML document, with resultant SSRF (as well as SMB connection initiation that can lead to NetNTLM challenge/response capture for password cracking). This occurs in extensions/contentmodel/participants/diagnostics/LSPXMLParserConfiguration.java.
Published: 2019-10-23T21:06:46.000Z
Updated: 2024-08-05T01:47:14.103Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18212 |
vulnerable | 2026-06-08 05:13:11.030117 |
Details available
XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows a remote attacker to write to arbitrary files via Directory Traversal.
Published: 2019-10-23T21:05:32.000Z
Updated: 2024-08-05T01:47:13.990Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.