CVE:CVE-2019-17637
CNNVD:CNNVD-202007-1032
Eclipse Web Tools Platform 3.18 (2020-06)及之前版本中的DTD Parser/Validator存在代码问题漏洞。攻击者可利用该漏洞将本地文件发送到远程服务器上。
solution:Upgrade eclipse web_tools_platform to a higher version than 3.18,and avoid the version [1.0,3.18]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0