Here's a list of the most noteworthy things in the RAP 3.25 release which is available for download since June 14, 2023.
In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is
possible on Windows when using the FileUpload
component - see
CVE-2023-4760for details.
The fix is part of all official releases since RAP 3.26. The service release
Eclipse RAP 3.25.1 provides a backport of the fix to the 3.25 stream.
To assist you with the migration from RAP 2.x (or 1.x) to 3.0, we provide a migration guide.