CVE-2019-17637: Debian Linux

High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days.

In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences.

Affected products

• Debian Debian Linux: version 9.0 only
• Eclipse Web Tools Platform: from 1.0, up to and including 3.18

Published 2020-07-15. Last modified 2026-06-17.