CVE-2018-12542

CVE-2018-12542: vulnerability in The Eclipse Foundation Eclipse Vert.x

Published · Updated

Follow this CVE+ Monitor Eclipse Vert.x+ Monitor io.vertx:vertx-web

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.2%
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location that is outside of that directory when running on Windows Operating Systems.
Affected products
The Eclipse Foundation · Eclipse Vert.x
Related CVEs — The Eclipse Foundation Eclipse Vert.x

In the same product, most dangerous first.

CVE-2018-12541—CVE-2018-12541EPSS 2.7%CVE-2018-12537—CVE-2018-12537EPSS 2.5%CVE-2018-12544—CVE-2018-12544EPSS 2.2%CVE-2019-17640—CVE-2019-17640EPSS 2.0%CVE-2018-12540—CVE-2018-12540EPSS 2.0%