[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7_2dRcVhi_nxxUZpOfn_I_br5n9-csGtxpx2cGlCTAw":3,"g5a-ex:eclipse\u002Feclipse_dataspace_components@*":126,"g5a-family:eclipse\u002Feclipse_dataspace_components":128},{"success":4,"data":5},true,{"product":6,"versions":64,"topVulnerabilitiesByEpss":89,"kevVulnerabilities":103,"seoMetadata":104,"meta":123},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":63},"eclipse","eclipse_dataspace_components",24,2,0,"2024-09-27",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.1.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.1.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.1.3",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.1",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.1",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.1",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.1",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.2",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.3",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.4",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.0",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.1",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.2",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.0",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.1",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.0",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.1","Eclipse Dataspace Components by Eclipse is a technology product with 24 tracked versions and 2 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},[90,98],{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":16,"epssScore":97},"CVE-2024-8642","In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass the check for token expiration. The issue requires to have a dataplane configured to support http proxy consumer pull AND include the module \"transfer-data-plane\". The affected code was marked deprecated from the version 0.6.0 in favour of Dataplane Signaling. In 0.9.0 the vulnerable code has been removed.","2024-09-11",5.1,"v4.0","Medium",0.00407,{"cveId":99,"description":100,"publishedDate":12,"cvssScore":101,"cvssVersion":95,"severity":96,"isKev":16,"epssScore":102},"CVE-2024-9202","In Eclipse Dataspace Components versions 0.1.3 to 0.9.0, the Connector component filters which datasets (= data offers) another party can see in a requested catalog, to ensure that only authorized parties are able to view restricted offers.\nHowever, there is the possibility to request a single dataset, which should be subject to the same filtering process, but currently is missing the correct filtering.\n\n\nThis enables parties to potentially see datasets they should not have access to, thereby exposing sensitive information. Exploiting this vulnerability requires knowing the ID of a restricted dataset, but some IDs may be guessed by trying out many IDs in an automated way.\n\n\nAffected code:\n DatasetResolverImpl, L76-79 https:\u002F\u002Fgithub.com\u002Feclipse-edc\u002FConnector\u002Fblob\u002Fv0.9.0\u002Fcore\u002Fcontrol-plane\u002Fcontrol-plane-catalog\u002Fsrc\u002Fmain\u002Fjava\u002Forg\u002Feclipse\u002Fedc\u002Fconnector\u002Fcontrolplane\u002Fcatalog\u002FDatasetResolverImpl.java",5.3,0.00377,[],{"title":105,"metaDescription":106,"keywords":107,"structuredData":108},"Eclipse Dataspace Components by Eclipse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Eclipse Dataspace Components by Eclipse covering 24 versions with 2 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Eclipse Dataspace Components vulnerabilities, Eclipse Dataspace Components security, Eclipse Dataspace Components CVE, Eclipse Eclipse Dataspace Components, Eclipse Dataspace Components threat intelligence, Eclipse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":109,"@type":110,"name":111,"description":106,"url":112,"manufacturer":113,"applicationCategory":117,"softwareVersion":118,"mainEntity":119},"https:\u002F\u002Fschema.org","SoftwareApplication","Eclipse Dataspace Components","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Feclipse\u002Feclipse_dataspace_components",{"@type":114,"name":115,"url":116},"Organization","Eclipse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Feclipse","Security Software","24 versions tracked",{"@type":120,"name":121,"description":122,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Eclipse Dataspace Components Security Vulnerabilities","Security vulnerabilities affecting Eclipse Dataspace Components by Eclipse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":124,"apiVersion":125},"2026-10-17T22:17:10.990Z","3.0",{"rows":127,"total":11,"capped":16,"failed":11},[],[]]