Here's a list of the most noteworthy things in the RAP 3.27 release which is available for download since December 06, 2023.
With the integration of Eclipse Jetty 12 in the Eclipse Platform, it was possible to upgrade the dependencies and the tooling in Eclipse RAP from Jetty 10 to 12.
Internally, Eclipse RAP is still using JakartaEE 8/javax.servlet.*, and based on Servlet 4.0.
In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is
possible on Windows when using the FileUpload component - see
CVE-2023-4760for details.
The fix is part of all official releases since RAP 3.26.
To assist you with the migration from RAP 2.x (or 1.x) to 3.0, we provide a migration guide.
Copyright © 2023 The Eclipse Foundation. All Rights Reserved.
