CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2020-27219
Medium (6.1) in eclipse hawkbit. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in org.eclipse.hawkbit:hawkbit-parent 0.3.0M7.
In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- eclipse:hawkbit
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-rcvx-rmvf-mxch | Maven | org.eclipse.hawkbit:hawkbit-parent | <0.3.0M7 | 0.3.0M7 |