← Database

CVE-2022-0672

MEDIUM CVSS: 5.5 Published: 2022-02-18 Modified: 2026-06-17

Description

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.

Affected Platforms

Eclipse Lemminx

Weakness Type

CWE-200, CWE-200

References