GitHub Advisoryadvisory · Maven

GHSA-6cw8-7j6c-hccp Moderate severity vulnerability that affects io.vertx:vertx-core

MEDIUM Published 2018-10-19 Modified 2020-06-16 Official page ↗
Aliases
CVE-2018-12537
Ecosystem
Maven
Packages
io.vertx:vertx-core
Severity
Moderate
Weaknesses
CWE-93
Reviewed
2020-06-16

Affected packages

• Maven io.vertx:vertx-core: >= 3.0.0, < 3.5.2 → fixed in 3.5.2

Description

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response.

Related

Alias · CVE (1)

  • CVE-2018-12537 In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and… vulnerability

Weakness · CWE (1)

  • CWE-93 Improper Neutralization of CRLF Sequences weakness

References