CVE-2023-4218 Security Details

CVE ID

CVE-2023-4218

CWE

CWE-611

CVE Description

In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).

Published

Nov 9, 2023

CVSS Score & Severity

5.0Medium

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

EPSS Score

0.026%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/aspectj/org/eclipse/jdt/internal/core/JavaModelManager.loadVariablesAndContainers()V

JVM

org/eclipse/ant/internal/ui/dtd/Parser.getXMLReader()Lorg/xml/sax/XMLReader;

JVM

org/eclipse/cdt/core/templateengine/SharedDefaults.createDefaultXMLFormat(Ljava/io/File;)Ljava/io/File;

JVM

org/eclipse/cdt/core/templateengine/SharedDefaults.deleteBackEndStorage([Ljava/lang/String;)V

JVM

org/eclipse/cdt/core/templateengine/SharedDefaults.generateSharedXML(Ljava/io/File;)V

JVM

org/eclipse/cdt/core/templateengine/SharedDefaults.initSharedDefaults()V

JVM

org/eclipse/cdt/core/templateengine/SharedDefaults.updateToBackEndStorage(Ljava/lang/String;Ljava/lang/String;)V

JVM

org/eclipse/cdt/internal/core/language/LanguageMappingStore.createSerializer()Ljavax/xml/transform/Transformer;

JVM

org/eclipse/cdt/internal/core/language/LanguageMappingStore.decodeWorkspaceMappings()Lorg/eclipse/cdt/core/language/WorkspaceLanguageConfiguration;

JVM

org/eclipse/cdt/internal/core/language/LanguageMappingStore.storeMappings(Lorg/eclipse/cdt/core/language/WorkspaceLanguageConfiguration;)V

JVMVulnerable params: 0

org/eclipse/che/jface/text/templates/persistence/TemplateReaderWriter.read(Lorg/xml/sax/InputSource;Ljava/util/ResourceBundle;Ljava/lang/String;)[Lorg/eclipse/che/jface/text/templates/persistence/TemplatePersistenceData;

JVMVulnerable params: 0

org/eclipse/compare/examples/xml/XMLStructureCreator.getStructure(Ljava/lang/Object;)Lorg/eclipse/compare/structuremergeviewer/IStructureComparator;

JVMVulnerable params: 0

org/eclipse/core/internal/resources/ProjectDescriptionReader.createParserFactory()Ljavax/xml/parsers/SAXParserFactory;

JVM

org/eclipse/core/internal/variables/StringVariableManager.getDocument()Lorg/w3c/dom/Document;

JVM

org/eclipse/core/internal/variables/StringVariableManager.loadPersistedValueVariables()V

JVM

org/eclipse/core/internal/variables/StringVariableManager.serializeDocument(Lorg/w3c/dom/Document;)Ljava/lang/String;

JVMVulnerable params: 0

org/eclipse/core/runtime/spi/RegistryStrategy.getXMLParser()Ljavax/xml/parsers/SAXParserFactory;

JVM

org/eclipse/debug/core/DebugPlugin.parseDocument(Ljava/lang/String;)Lorg/w3c/dom/Element;

JVMVulnerable params: 0

org/eclipse/debug/internal/ui/DebugUIPlugin.getDocument()Lorg/w3c/dom/Document;

JVM

org/eclipse/debug/internal/ui/sourcelookup/WorkingSetSourceContainerType.createSourceContainer(Ljava/lang/String;)Lorg/eclipse/debug/core/sourcelookup/ISourceContainer;

JVMVulnerable params: 0

org/eclipse/e4/tools/emf/ui/internal/common/component/tabs/DocUtil.createDocument(Ljava/lang/String;)Lorg/w3c/dom/Document;

JVMVulnerable params: 0

org/eclipse/emf/ecore/xmi/impl/XMLHandler.resolveEntity(Ljava/lang/String;Ljava/lang/String;)Lorg/xml/sax/InputSource;

JVM

org/eclipse/equinox/internal/p2/core/helpers/SecureXMLUtil.newSecureDocumentBuilderFactory()Ljavax/xml/parsers/DocumentBuilderFactory;

JVM

org/eclipse/equinox/internal/p2/core/helpers/SecureXMLUtil.newSecureSAXParserFactory()Ljavax/xml/parsers/SAXParserFactory;

JVM

org/eclipse/equinox/internal/p2/publisher/eclipse/InfoPListEditor.save(Ljava/io/File;)V

JVM

org/eclipse/equinox/internal/transforms/xslt/XSLTStreamTransformer.getTemplate(Ljava/net/URL;)Ljavax/xml/transform/Templates;

JVMVulnerable params: 0

org/eclipse/help/internal/HelpData.loadHelpData()V

JVM

org/eclipse/help/internal/base/remote/RemoteSearchParser.init()V

JVM

org/eclipse/help/internal/dynamic/DocumentWriter.writeBytes(Lorg/w3c/dom/Element;Z)[B

JVMVulnerable params: 0

org/eclipse/help/internal/entityresolver/LocalEntityResolver.resolveEntity(Ljava/lang/String;Ljava/lang/String;)Lorg/xml/sax/InputSource;

JVMVulnerable params: 1

org/eclipse/help/internal/webapp/parser/ResultParser.parse(Ljava/io/InputStream;)V

JVM

org/eclipse/help/ui/internal/views/EngineDescriptorManager.load(Ljava/io/Reader;)V

JVMVulnerable params: 0

org/eclipse/jdt/apt/core/internal/util/FactoryPathUtil.decodeFactoryPath(Ljava/lang/String;)Ljava/util/Map;

JVMVulnerable params: 0

org/eclipse/jdt/internal/core/JavaModelManager.loadVariablesAndContainers()V

JVM

org/eclipse/jdt/internal/core/JavaProject.decodeClasspath(Ljava/lang/String;Ljava/util/Map;)[[Lorg/eclipse/jdt/core/IClasspathEntry;

JVMVulnerable params: 0

org/eclipse/jdt/internal/core/JavaProject.decodeClasspathEntry(Ljava/lang/String;)Lorg/eclipse/jdt/core/IClasspathEntry;

JVMVulnerable params: 0

org/eclipse/jdt/internal/core/UserLibrary.createFromString(Ljava/io/Reader;)Lorg/eclipse/jdt/internal/core/UserLibrary;

JVMVulnerable params: 0

org/eclipse/jdt/internal/corext/util/History.load(Lorg/xml/sax/InputSource;)V

JVMVulnerable params: 0

org/eclipse/jdt/internal/corext/util/History.save(Ljava/io/OutputStream;)V

JVM

org/eclipse/jdt/internal/junit/model/JUnitModel.exportTestRunSession(Lorg/eclipse/jdt/internal/junit/model/TestRunSession;Ljava/io/OutputStream;)V

JVMVulnerable params: 0

org/eclipse/jdt/internal/junit/model/JUnitModel.importIntoTestRunSession(Ljava/io/File;Lorg/eclipse/jdt/internal/junit/model/TestRunSession;)V

JVMVulnerable params: 0

org/eclipse/jdt/internal/junit/model/JUnitModel.importTestRunSession(Ljava/io/File;)Lorg/eclipse/jdt/internal/junit/model/TestRunSession;

JVMVulnerable params: 0

org/eclipse/jdt/internal/junit/model/JUnitModel.importTestRunSession(Ljava/lang/String;Lorg/eclipse/core/runtime/IProgressMonitor;)Lorg/eclipse/jdt/internal/junit/model/TestRunSession;

JVMVulnerable params: 0

org/eclipse/jdt/internal/launching/LaunchingPlugin.getParser()Ljavax/xml/parsers/DocumentBuilder;

JVM

org/eclipse/jdt/internal/launching/LaunchingPlugin.readInstallInfo()V

JVM

org/eclipse/jdt/internal/ui/javadocexport/JavadocReader.readXML()Lorg/w3c/dom/Element;

JVM

org/eclipse/jface/dialogs/DialogSettings.load(Ljava/io/Reader;)V

JVMVulnerable params: 0

org/eclipse/jface/text/templates/persistence/TemplateReaderWriter.read(Lorg/xml/sax/InputSource;Ljava/util/ResourceBundle;Ljava/lang/String;)[Lorg/eclipse/jface/text/templates/persistence/TemplatePersistenceData;

JVMVulnerable params: 0

org/eclipse/jface/text/templates/persistence/TemplateReaderWriter.save([Lorg/eclipse/jface/text/templates/persistence/TemplatePersistenceData;Ljavax/xml/transform/stream/StreamResult;)V

JVMVulnerable params: 0

org/eclipse/ltk/internal/core/refactoring/RefactoringSessionReader.readSession(Lorg/xml/sax/InputSource;)Lorg/eclipse/ltk/core/refactoring/RefactoringSessionDescriptor;

JVMVulnerable params: 0

org/eclipse/osgi/internal/framework/XMLParsingServiceFactory.createService()Ljava/lang/Object;

JVM

org/eclipse/pde/api/tools/internal/APIFileGenerator.containsAPIToolsNature(Ljava/lang/String;)Z

JVMVulnerable params: 0

org/eclipse/pde/api/tools/internal/ApiBaselineManager.readBaselineComponents(Lorg/eclipse/pde/api/tools/internal/model/ApiBaseline;Ljava/io/InputStream;)[Lorg/eclipse/pde/api/tools/internal/provisional/model/IApiComponent;

JVMVulnerable params: 1

org/eclipse/pde/api/tools/ui/internal/actions/ExportSessionAction.run()V

JVM

org/eclipse/pde/internal/build/tasks/JNLPGenerator.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/util/Locale;ZLjava/lang/String;)V

JVM

org/eclipse/pde/internal/core/AbstractModel.getSaxParser()Ljavax/xml/parsers/SAXParser;

JVM

org/eclipse/pde/internal/ds/core/builders/DefaultSAXParser.parse(Lorg/eclipse/core/resources/IFile;Lorg/eclipse/pde/internal/ds/core/builders/XMLErrorReporter;)V

JVMVulnerable params: 0

org/eclipse/pde/internal/ds/core/builders/XMLErrorReporter.startDocument()V

JVM

org/eclipse/pde/internal/ui/wizards/exports/FeatureExportWizard.generateAntTask()Lorg/w3c/dom/Document;

JVM

org/eclipse/swt/tools/internal/MacGenerator.getDocument(Ljava/lang/String;)Lorg/w3c/dom/Document;

JVMVulnerable params: 0

org/eclipse/team/internal/ui/wizards/ProjectSetExportWizard$1.getXMLMementoRoot()Lorg/eclipse/ui/XMLMemento;

JVM

org/eclipse/text/templates/TemplateReaderWriter.read(Lorg/xml/sax/InputSource;Ljava/util/ResourceBundle;Ljava/lang/String;)[Lorg/eclipse/text/templates/TemplatePersistenceData;

JVMVulnerable params: 0

org/eclipse/text/templates/TemplateReaderWriter.save([Lorg/eclipse/text/templates/TemplatePersistenceData;Ljavax/xml/transform/stream/StreamResult;)V

JVMVulnerable params: 0

org/eclipse/tips/ide/internal/IDETipManager.doGetPriority(Ljava/lang/String;)I

JVMVulnerable params: 0

org/eclipse/ui/XMLMemento.createReadRoot(Ljava/io/Reader;Ljava/lang/String;)Lorg/eclipse/ui/XMLMemento;

JVMVulnerable params: 0

org/eclipse/ui/XMLMemento.createWriteRoot(Ljava/lang/String;)Lorg/eclipse/ui/XMLMemento;

JVMVulnerable params: 0

org/eclipse/ui/internal/cheatsheets/CheatSheetPlugin.getDocumentBuilder()Ljavax/xml/parsers/DocumentBuilder;

JVM

org/eclipse/ui/internal/forms/widgets/FormTextModel.parseInputStream(Ljava/io/InputStream;Z)V

JVMVulnerable params: 0

org/eclipse/ui/internal/ide/dialogs/WelcomeParser.<init>()V

JVM

org/eclipse/ui/internal/intro/impl/model/loader/IntroContentParser.convertToString(Lorg/w3c/dom/Document;)Ljava/lang/String;

JVMVulnerable params: 0

org/eclipse/ui/internal/intro/impl/model/loader/IntroContentParser.parse(Ljava/lang/String;)Lorg/w3c/dom/Document;

JVMVulnerable params: 0

org/eclipse/ui/internal/intro/universal/IntroData.parse(Ljava/lang/String;)Lorg/w3c/dom/Document;

JVMVulnerable params: 0

org/eclipse/ui/intro/contentproviders/EclipseRSSViewer$ContentThread.run()V

JVM

org/eclipse/update/internal/configurator/ConfigurationParser.<init>()V

JVM

org/eclipse/update/internal/configurator/FeatureParser.<init>()V

JVM

org/eclipse/urischeme/internal/registration/PlistFileWriter.getDom(Ljava/io/Reader;)Lorg/w3c/dom/Document;

JVMVulnerable params: 0

org/eclipse/urischeme/internal/registration/PlistFileWriter.transformDocument(Ljava/io/Writer;)V

JVM

rg/eclipse/che/jface/text/templates/persistence/TemplateReaderWriter.save([Lorg/eclipse/che/jface/text/templates/persistence/TemplatePersistenceData;Ljavax/xml/transform/stream/StreamResult;)V

JVMVulnerable params: 0

rg/eclipse/jdt/internal/launching/LaunchingPlugin.restoreLibraryInfo()V

JVM

Affected Ecosystems

affected

Source

National Vulnerability Database

References

gitlab.eclipse.orgPROJECT

gitlab.eclipse.orgPROJECT

GitHub · Advisory · GHSA-j24h-xcpc-9jw8THIRD_PARTY