Skip to content
OpenAdvisories

Package · Maven

io.vertx:vertx-web

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2020-35217

    Cross-Site Request Forgery in Vert.x-Web framework

    Vert.x-Web framework v4.0 milestone 1-4 does not perform a correct CSRF verification. Instead of comparing the CSRF token in the request with the CSRF token in the cookie, it compares the CSRF token in the cookie against a CSRF token that is stored in the ses…

    io.vertx:vertx-web Maven
  • High —
    CVE-2018-12540 Public exploit

    High severity vulnerability that affects io.vertx:vertx-web

    In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.

    The Eclipse Foundation Eclipse Vert.x io.vertx:vertx-web Maven