← All credits

Thanks to Iassen Minov for reporting the issue.

1 vulnerability record and advisories credit this contributor.

CVE-2019-17634
Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report from a malicious heap dump. The user must chose todownload, open the malicious heap dump and generate an HTML report