Skip to content
OpenAdvisories

Package · Maven

io.vertx:vertx-web

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.3

    Vert.x-Web Access Control Flaw in StaticHandler’s Hidden File Protection for Files Under Hidden Directories

    In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them (e.g. '.git/config').

  • Medium 4.8

    Disclosure of classpath resources on Windows when mounted on a wildcard route in vertx-web

    Vert.x-Web is a set of building blocks for building web applications in the java programming language. When running vertx web applications that serve files using `StaticHandler` on Windows Operating Systems and Windows File Systems, if the mount point is a wi…