Vulnerabilities

CVE-2022-0673 | BDVDB-2026-170392 Detail

LemMinX

Description#

A flaw was found in LemMinX in versions prior to 0.19.0. Cache poisoning of external schema files due to directory traversal.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022

Exploit#

No public exploit known

History#

Version 12022-02-18Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.