Vulnerability in The Eclipse Foundation Che

CVE-2021-41034

The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such stacks are vulnerable to MITM attacks that allow the replacement of the original…

EPSS: 0.002 (42.6th percentile) — read the EPSS interpretation.