CVE-2019-17636
Last modified
CVE-2019-17636 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. In Eclipse Theia versions 0.3.9 through 0.15.0, one of the default pre-packaged Theia extensions is "Mini-Browser", published as "@theia/mini-browser" on npmjs.com. This extension, for its own needs, exposes a HTTP endpoint that allows to read the content of files on the host's filesystem, given their path, without restrictions on the requester's origin. EPSS estimates a 0.59% chance of exploitation in the next 30 days.
Description
In Eclipse Theia versions 0.3.9 through 0.15.0, one of the default pre-packaged Theia extensions is "Mini-Browser", published as "@theia/mini-browser" on npmjs.com. This extension, for its own needs, exposes a HTTP endpoint that allows to read the content of files on the host's filesystem, given their path, without restrictions on the requester's origin. This design is vulnerable to being exploited remotely through a DNS rebinding attack or a drive-by download of a carefully crafted exploit.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Eclipse | Theia | >= 0.3.9, <= 0.15.0 |
References
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=551747Exploit, Issue Tracking, Vendor Advisory
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=551747Exploit, Issue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-17636?
How severe is CVE-2019-17636?
How do I fix CVE-2019-17636?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-17630CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin…4.8
- CVE-2019-17631From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic opera…9.1
- CVE-2019-17632In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022…6.1
- CVE-2019-17633For Eclipse Che versions 6.16 to 7.3.0, with both authentica…8.8
- CVE-2019-17634Eclipse Memory Analyzer version 1.9.1 and earlier is subject…9
- CVE-2019-17635Eclipse Memory Analyzer version 1.9.1 and earlier is subject…7.8
- CVE-2019-17637In all versions of Eclipse Web Tools Platform through releas…7.1
- CVE-2019-17638In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200…9.4
- CVE-2019-17639In Eclipse OpenJ9 prior to version 0.21 on Power platforms, …5.3
- CVE-2019-1764A vulnerability in the web-based management interface of Ses…8.1
- CVE-2019-17640In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0…9.8
- CVE-2019-17642An issue was discovered in Centreon before 18.10.8, 19.10.1,…8.8
Are you affected by CVE-2019-17636?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST