Skip to content
OpenAdvisories

Package · Maven

io.vertx:vertx-web

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2018-12540 Public exploit

    High severity vulnerability that affects io.vertx:vertx-web

    In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.

    The Eclipse Foundation Eclipse Vert.x io.vertx:vertx-web Maven