The Eclipse Foundation

3 results · Clear filters · Feed

• Critical 9.8
  CVE-2019-17640 Public exploit

  Path Traversal in Eclipse Vert

  In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allo…

  The Eclipse Foundation Eclipse Vert.x io.vertx:vertx-web Maven
  Oct 15, 2020
• Critical 9.4
  CVE-2019-17638 Public exploit EPSS 11%

  Operation on a Resource after Expiration or Release in Jetty Server

  In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the Byte…

  The Eclipse Foundation Eclipse Jetty jetty9 org.eclipse.jetty:jetty-server Debian Maven
  Jul 9, 2020
• Critical 9.8
  CVE-2018-12542 Public exploit

  Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location

  In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location th…

  The Eclipse Foundation Eclipse Vert.x io.vertx:vertx-web Maven
  Oct 10, 2018