Skip to content
OpenAdvisories

Archive

10 October 2018

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2018-12542 Public exploit

    Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location

    In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location th…