REDHAT-BUG-2405820: Medium severity maven/io.vertx/vertx-core vulnerability
In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them (e.g. '.git/config').
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2405820?
The severity of REDHAT-BUG-2405820 is considered critical due to the potential unauthorized access to sensitive files.
How do I fix REDHAT-BUG-2405820?
To fix REDHAT-BUG-2405820, upgrade to Eclipse Vert.x version 4.5.22 or higher, or 5.0.5 or higher.
What versions are affected by REDHAT-BUG-2405820?
Eclipse Vert.x versions from 4.0.0 to 4.5.21 and 5.0.0 to 5.0.4 are affected by REDHAT-BUG-2405820.
What type of files could be accessed due to REDHAT-BUG-2405820?
Due to REDHAT-BUG-2405820, unauthorized users could access hidden files and directories, such as '.git/config'.
Is there a workaround for REDHAT-BUG-2405820?
Currently, there is no recommended workaround for REDHAT-BUG-2405820; the best mitigation is to apply the provided updates.