Edc (Eclipse Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2024-09-11. Vendor: Eclipse Foundation.

CVEs of Edc

• CVE-2024-8642 - CVSS 8.1 (high), 2024-09-11: In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token…
• CVE-2024-4536 - CVSS 6.8 (medium), 2024-05-07: In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component ( https://github.com/eclipse-edc/Connector ), an attacker might…