What is the severity of CVE-2019-17640?

CVE-2019-17640 has a medium severity rating due to its potential to allow directory traversal on Windows systems.

How do I fix CVE-2019-17640?

To mitigate CVE-2019-17640, upgrade to the latest version of Eclipse Vert.x that addresses this vulnerability.

Which versions of Eclipse Vert.x are affected by CVE-2019-17640?

Eclipse Vert.x versions 3.4.0 to 3.9.4 and various 4.0.0 milestones and betas are affected by CVE-2019-17640.

What impact does CVE-2019-17640 have on vulnerable systems?

CVE-2019-17640 allows attackers to escape the webroot folder, potentially exposing sensitive files on affected Windows systems.

Is there a workaround for CVE-2019-17640?

A workaround for CVE-2019-17640 involves applying restrictions on the StaticHandler configuration to prevent directory traversal.

Vulnerability/
CVE-2019-17640

critical

9.8

CWE

22 23

15/10/2020

5/8/2024

CVE-2019-17640: Path Traversal

First published: Thu Oct 15 2020(Updated: )

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the current working directory.

Credit: emo@eclipse.org

Affected Software	Affected Version	How to fix
Eclipse Vert.x	>=3.4.0<=3.9.4
Eclipse Vert.x	=4.0.0-beta1
Eclipse Vert.x	=4.0.0-beta2
Eclipse Vert.x	=4.0.0-beta3
Eclipse Vert.x	=4.0.0-milestone1
Eclipse Vert.x	=4.0.0-milestone2
Eclipse Vert.x	=4.0.0-milestone3
Eclipse Vert.x	=4.0.0-milestone4
Eclipse Vert.x	=4.0.0-milestone5

Remedy

https://lists.apache.org/thread.html/r591f6932560c8c46cee87415afed92924a982189fea7f7c9096f8e33@%3Ccommits.pulsar.apache.org%3E

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-17640?
CVE-2019-17640 has a medium severity rating due to its potential to allow directory traversal on Windows systems.
How do I fix CVE-2019-17640?
To mitigate CVE-2019-17640, upgrade to the latest version of Eclipse Vert.x that addresses this vulnerability.
Which versions of Eclipse Vert.x are affected by CVE-2019-17640?
Eclipse Vert.x versions 3.4.0 to 3.9.4 and various 4.0.0 milestones and betas are affected by CVE-2019-17640.
What impact does CVE-2019-17640 have on vulnerable systems?
CVE-2019-17640 allows attackers to escape the webroot folder, potentially exposing sensitive files on affected Windows systems.
Is there a workaround for CVE-2019-17640?
A workaround for CVE-2019-17640 involves applying restrictions on the StaticHandler configuration to prevent directory traversal.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/author
agent/references
agent/last-modified-date
agent/severity
agent/remedy
agent/weakness
agent/first-publish-date
agent/event
agent/description
agent/tags
agent/source
vendor/eclipse
canonical/eclipse vert.x
version/eclipse vert.x/3.4.0
version/eclipse vert.x/3.9.4
version/eclipse vert.x/4.0.0-beta1
version/eclipse vert.x/4.0.0-beta2
version/eclipse vert.x/4.0.0-beta3
version/eclipse vert.x/4.0.0-milestone1
version/eclipse vert.x/4.0.0-milestone2
version/eclipse vert.x/4.0.0-milestone3
version/eclipse vert.x/4.0.0-milestone4
version/eclipse vert.x/4.0.0-milestone5

Frequently Asked Questions

What is the severity of CVE-2019-17640?
CVE-2019-17640 has a medium severity rating due to its potential to allow directory traversal on Windows systems.
How do I fix CVE-2019-17640?
To mitigate CVE-2019-17640, upgrade to the latest version of Eclipse Vert.x that addresses this vulnerability.
Which versions of Eclipse Vert.x are affected by CVE-2019-17640?
Eclipse Vert.x versions 3.4.0 to 3.9.4 and various 4.0.0 milestones and betas are affected by CVE-2019-17640.
What impact does CVE-2019-17640 have on vulnerable systems?
CVE-2019-17640 allows attackers to escape the webroot folder, potentially exposing sensitive files on affected Windows systems.
Is there a workaround for CVE-2019-17640?
A workaround for CVE-2019-17640 involves applying restrictions on the StaticHandler configuration to prevent directory traversal.

CVE-2019-17640: Path Traversal

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-17640?

How do I fix CVE-2019-17640?

Which versions of Eclipse Vert.x are affected by CVE-2019-17640?

What impact does CVE-2019-17640 have on vulnerable systems?

Is there a workaround for CVE-2019-17640?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2019-17640?

How do I fix CVE-2019-17640?

Which versions of Eclipse Vert.x are affected by CVE-2019-17640?

What impact does CVE-2019-17640 have on vulnerable systems?

Is there a workaround for CVE-2019-17640?