Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse:vorto:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEclipse (fa988180-604e-5c1f-93ea-65b5297000fc)
ProductVorto (e2d79d95-6e08-5cd7-bb58-f4c8ab4ce018)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/eclipse/vorto purl2cpe 2026-06-01 10:15:03.065753
pkg:maven/org.eclipse.vorto/parent purl2cpe 2026-06-01 10:15:03.065756

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10248 vulnerable 2026-06-03 14:39:22.157047 Details available
Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be infected.
Published: 2019-04-22T20:15:24.000Z
Updated: 2024-08-04T22:17:20.094Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.