Approved changes feed: RSS · Atom
cpe:2.3:a:eclipse_foundation:vert.x:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Eclipse Foundation (2c315c48-0111-5572-bbde-cc70cfafb2e9) |
|---|---|
| Product | Vert.X (8f019393-ac50-5637-9639-3a524bee4724) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11966 |
vulnerable | 2026-06-03 14:58:43.567163 |
Details available
In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename files or directories within a served path can craft filenames containing malicious script or HTML content, leading to stored cross-site scripting (XSS) that executes in the context of users viewing the affected directory listing.
Published: 2025-10-22T14:44:24.145Z
Updated: 2025-10-22T15:26:41.527Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11965 |
vulnerable | 2026-06-03 14:58:43.565920 |
Details available
In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them (e.g. '.git/config').
Published: 2025-10-22T14:50:07.602Z
Updated: 2025-10-22T15:56:08.021Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8391 |
vulnerable | 2026-06-03 14:58:18.325101 |
Eclipse Vert.x gRPC server does not limit the maximum message size
In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client).
This is fixed in the 4.5.10 version.
Note this does not affect the Vert.x gRPC server based grpc-java and Netty libraries (Maven GAV: io.vertx:vertx-grpc)
Published: 2024-09-04T15:27:58.478Z
Updated: 2024-09-04T17:40:20.318Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.