SÄrbarheter i autouppdateringsmekanismen för Apache NetBeans
Information about two vulnerabilities in the automatic update delivery system for the integrated development environment Apache NetBeans has been revealed, allowing the server's updates and nbm-packages to be altered. The issues were addressed discreetly in the release of Apache NetBeans 11.3. The first vulnerability (CVE-2019-17560) is caused by the lack of SSL certificate and hostname verification when loading data via HTTPS, which can allow the loaded data to be covertly altered […]
