CVE-2019-11770

CVE-2019-11770 affects Eclipse Buildship versions prior to 3.1.1, where build files resolve dependencies over insecure HTTP instead of HTTPS. This critical vulnerability (CVSS 8.1 HIGH) allows for Man-in-the-Middle (MITM) attacks during dependency resolution, potentially leading to the compromise of build artifacts and continued infection of developer environments. While the vulnerability has a high severity due to its network attack vector and high impact on confidentiality, integrity, and availability, there is currently no evidence of active exploitation, public exploit code, or significant community discussion.