Vulnetix
Try Vulnetix Request Demo
CVE-2018-12544 PUBLISHED CVSS 9.800000190734863 CRITICAL

In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate defense against XML attacks. This mechanism is exclusively when the developer uses the Eclipse Vert.x OpenAPI XML type validator to validate a provided schema.

EPSS 0.62% · 69.8th percentile

Risk Scores

CVSS v3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.62%
69.8th percentile

Affected Products

VendorProductVersions
Mavenio.vertx:vertx-core3.5.0
The Eclipse FoundationEclipse Vert.xunspecified, 3.5.0
eclipsevert.x3.5.1, 3.5.2, 3.5.2

Timeline

References

Open in Interactive Console →