Skip to content
OpenAdvisories

Product · The Eclipse Foundation

Eclipse Vert.x

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-17640 Public exploit

    Path Traversal in Eclipse Vert

    In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allo…

    The Eclipse Foundation Eclipse Vert.x io.vertx:vertx-web Maven
  • Critical 9.8
    CVE-2018-12542 Public exploit

    Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location

    In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location th…

    The Eclipse Foundation Eclipse Vert.x io.vertx:vertx-web Maven