CVE-2022-0673

MEDIUM

LemMinX < 0.19.0 - Path Traversal via External Schema File Cache Poisoning

Title source: llm

A flaw was found in LemMinX in versions prior to 0.19.0. Cache poisoning of external schema files due to directory traversal.

Core 1

Core References

Release Notes, Third Party Advisory x_refsource_misc

CVSS v3 6.5

EPSS 0.0018

EPSS Percentile 38.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-22

Status published

Products (2)

eclipse/lemminx < 0.19.0

org.eclipse.lemminx/lemminx-parent 0 - 0.19.0Maven

Published Feb 18, 2022

Tracked Since Feb 18, 2026