{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T02:48:08.360","vulnerabilities":[{"cve":{"id":"CVE-2018-12542","sourceIdentifier":"emo@eclipse.org","published":"2018-10-10T20:29:00.553","lastModified":"2026-06-17T01:37:56.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\\' (forward slashes) sequences that can resolve to a location that is outside of that directory when running on Windows Operating Systems."},{"lang":"es","value":"De la versión 3.0.0 a la 3.5.3 de Eclipse Vert.x, StaticHandler emplea entradas externas para construir un nombre de ruta que debería estar en un directorio restringido, pero que no neutraliza correctamente secuencias de \"\\\" (barras diagonales) que pueden resolverse en una ubicación fuera de ese directorio al ejecutarse en sistemas operativos Windows."}],"affected":[{"source":"emo@eclipse.org","affectedData":[{"vendor":"The Eclipse Foundation","product":"Eclipse Vert.x","versions":[{"version":"3.0","lessThan":"unspecified","versionType":"custom","status":"affected"},{"version":"unspecified","lessThanOrEqual":"3.5.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.5.3","matchCriteriaId":"872A088D-F71A-4BEA-AA9A-6A222CCA001B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=539171","source":"emo@eclipse.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/vert-x3/vertx-web/issues/1025","source":"emo@eclipse.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E","source":"emo@eclipse.org"},{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=539171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/vert-x3/vertx-web/issues/1025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}