Skip to content
6.3 Medium

CVE-2025-11965 In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to…

Description

In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them (e.g. '.git/config').

Affected products and versions

Product Affected versions Fixed in
Vert.x 5.0 5.0.0 → < 5.0.5 5.0.5
Vert.x 4.0 4.0.0 → < 4.5.22 4.5.22

References

Timeline

  1. Published
  2. Last modified
The 2 CVEs of Vert.x →
Track this CVE