CVE-2018-12544CWE-611

CVE-2018-12544: vulnerability in The Eclipse Foundation Eclipse Vert.x

Published · Updated

Follow this CVE+ Monitor Eclipse Vert.x+ Monitor io.vertx:vertx-core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.2%
In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate defense against XML attacks. This mechanism is exclusively when the developer uses the Eclipse Vert.x OpenAPI XML type validator to validate a provided schema.
Affected products
The Eclipse Foundation · Eclipse Vert.x
Related CVEs — The Eclipse Foundation Eclipse Vert.x

In the same product, most dangerous first.

CVE-2018-12541—CVE-2018-12541EPSS 2.7%CVE-2018-12537—CVE-2018-12537EPSS 2.5%CVE-2018-12542—CVE-2018-12542EPSS 2.2%CVE-2019-17640—CVE-2019-17640EPSS 2.0%CVE-2018-12540—CVE-2018-12540EPSS 2.0%