CVE:CVE-2020-27219
CNNVD:CNNVD-202101-1132
Eclipse hawkBit是Eclipse基金会的一个独立于域的后端框架。该产品用于向受限边缘设备推出软件更新。
Eclipse Hawkbit prior to 0.3.0M7 存在安全漏洞，该漏洞源于响应体可能在path属性中包含不安全字符。
solution:Upgrade eclipse hawkbit to a higher version than 0.2.5,0.3.0:m1,0.3.0:m2,0.3.0:m3,0.3.0:m4,0.3.0:m5,0.3.0:m6,and avoid the version (,0.2.5],0.3.0:m1,0.3.0:m2,0.3.0:m3,0.3.0:m4,0.3.0:m5,0.3.0:m6