Che (Eclipse) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 166 known versions, newest CVE from 2021-09-29. Vendor: Eclipse.

CVEs of Che

• CVE-2021-41034 - CVSS 8.1 (high), 2021-09-29: The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such…
• CVE-2020-14368 - CVSS 7.1 (high), 2020-12-14: A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with cookies authentication, Theia IDE doesn't…
• CVE-2020-10689 - CVSS 6.8 (medium), 2020-04-03: A flaw was found in the Eclipse Che up to version 7.8.x, where it did not properly restrict access to workspace pods. An authenticated user can exploit this…
• CVE-2019-17633 - CVSS 8.8 (high), 2019-12-19: For Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a malicious web site could trigger the start of an arbitrary Che…