CVE-2018-12540: CSRF
First published: Thu Jul 12 2018(Updated: )
In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.
Credit: emo@eclipse.org emo@eclipse.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eclipse Vert.x | >=3.0.0<=3.5.2 | |
| redhat/vertex-web | <3.5.3 | 3.5.3 |
| maven/io.vertx:vertx-web | >=3.0.0<3.5.3 | 3.5.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2018-12540 https://nvd.nist.gov/vuln/detail/CVE-2018-12540
- https://bugzilla.redhat.com/show_bug.cgi?id=1600666
- https://access.redhat.com/errata/RHSA-2018:2371
- https://access.redhat.com/security/cve/cve-2018-12540
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=536948
- https://lists.apache.org/thread.html/r10aef585c521f8ef603f5831f9d97a27d920624025131da950e0c62f@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r3fffda8e947edaa359152c8dc4c4ea9c96fd8ced1999bbce92bc6b25@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r59482ebed302aa49ac7e0c51737499746b0d086fcdeb8f90e705951f@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/rc5b4ae8a7caae6d3d5b3266cb050823b96dd62b30718b90b778d3d8b@%3Ccommits.pulsar.apache.org%3E
- https://github.com/vert-x3/vertx-web/issues/970
- https://github.com/vert-x3/vertx-web/commit/98891b1d9e022b467a3e4674aca4d1889849b1d5
- https://nvd.nist.gov/vuln/detail/CVE-2018-12540
- https://github.com/advisories/GHSA-rvgg-f8qm-6h7j (Advisory)
- https://github.com/vert-x3/vertx-web/commit/f42b193b15a29b772fc576b2d0f2497e7474a7e
- https://lists.apache.org/thread.html/r10aef585c521f8ef603f5831f9d97a27d920624025131da950e0c62f%40%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r3fffda8e947edaa359152c8dc4c4ea9c96fd8ced1999bbce92bc6b25%40%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r59482ebed302aa49ac7e0c51737499746b0d086fcdeb8f90e705951f%40%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/rc5b4ae8a7caae6d3d5b3266cb050823b96dd62b30718b90b778d3d8b%40%3Ccommits.pulsar.apache.org%3E
Frequently Asked Questions
What is the severity of CVE-2018-12540?
CVE-2018-12540 is rated as a medium severity vulnerability due to its potential for replay attacks.
How do I fix CVE-2018-12540?
To fix CVE-2018-12540, upgrade Eclipse Vert.x to version 3.5.3 or later.
What versions of Eclipse Vert.x are affected by CVE-2018-12540?
Versions of Eclipse Vert.x from 3.0.0 to 3.5.2 are affected by CVE-2018-12540.
What type of attacks does CVE-2018-12540 allow?
CVE-2018-12540 allows replay attacks with previously issued tokens that are not expired.
Is the CSRFHandler secure in versions after CVE-2018-12540?
Yes, the CSRFHandler is secure in versions after 3.5.2 as it addresses the vulnerability.
- collector/redhat-cve
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/severity
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-12540
- agent/software-canonical-lookup
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-rvgg-f8qm-6h7j
- agent/description
- agent/softwarecombine
- collector/nvd-cve
- source/NVD
- agent/references
- agent/author
- collector/github-advisory
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/tags
- agent/source
- vendor/eclipse
- canonical/eclipse vert.x
- version/eclipse vert.x/3.0.0
- version/eclipse vert.x/3.5.2
- package-manager/redhat
- package-manager/maven