TI-2026-69556 CVE-2026-107503 · GHSA-g8w6-jp67-cwcc
Eclipse Ditto Explorer UI loads untrusted cross-origin configuration
Priority LOW 31
In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including the Ditto API URI and the OpenID Connect (OIDC) provider settings, from an arbit…