CVE-2018-12542 - In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location that is outside of that directory when running on Windows Operating Systems

Back Back to CVE browser

CRITICAL

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location that is outside of that directory when running on Windows Operating Systems

Published Oct 10, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 2.22%

Description

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location that is outside of that directory when running on Windows Operating Systems.

Affected products

Vendor The Eclipse Foundation Product Eclipse Vert.x Default
n/a
- Version
  3.0
  Status
  affected
  Constraints
  <unspecified
- Version
  unspecified
  Status
  affected
  Constraints
  <=3.5.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

The Eclipse Foundation

Eclipse Vert.x

n/a

Version	Status	Constraints
3.0	affected	<unspecified
unspecified	affected	<=3.5.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (8)

https://bugs.eclipse.org/bugs/show_bug.cgi?id=539171
x_refsource_CONFIRMIssue TrackingVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0608
Advisory
https://github.com/advisories/GHSA-h39x-m55c-v55h
Advisory
https://github.com/vert-x3/vertx-web/commit/57a65dce6f4c5aa5e3ce7288685e7f3447eb8f3b
https://github.com/vert-x3/vertx-web/issues/1025
x_refsource_CONFIRMExploitVendor Advisory
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E
mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2018-12542

Link	Providers	Tags
https://bugs.eclipse.org/bugs/show_bug.cgi?id=539171		x_refsource_CONFIRMIssue TrackingVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0608		Advisory
https://github.com/advisories/GHSA-h39x-m55c-v55h		Advisory
https://github.com/vert-x3/vertx-web/commit/57a65dce6f4c5aa5e3ce7288685e7f3447eb8f3b
https://github.com/vert-x3/vertx-web/issues/1025		x_refsource_CONFIRMExploitVendor Advisory
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E		mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2018-12542