CVE-2019-17640

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-17640
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17640.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-17640
Aliases
Published
2020-10-15T21:15:11.427Z
Modified
2026-04-10T04:16:32.681411Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the current working directory.

References

Affected packages

Git / github.com/vert-x3/vertx-web

Affected ranges

Type
GIT
Repo
https://github.com/vert-x3/vertx-web
Events
Introduced
8a11acc912accf4c0661f5c56f1cd387f5200718
Last affected
1258a682e0ec6a695da8b05063afb0ee57a503c9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4b8bd2f1053800a3e79152f2f10026942554a44f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fe51f662e3cf2d0dd7044d4c7a7d3db5ca1761bb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e49ad005a7e87d0cb9b860487684779b6978093f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1d18809825e4280ab2e5302d6409783bea04f3b3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
747517490415736eaa1b15dd07cec0b3b69d7493
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b2979b914d3fcc001f9621284202e32fc6e53578
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1d0a62d5d571d45b2b6165b083d0da90b9207481
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2e72faef41bec6162023aca898678929064870cd
Database specific 
{
    "versions": [
        {
            "introduced": "3.4.0"
        },
        {
            "last_affected": "3.9.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-beta3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-milestone1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-milestone2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-milestone3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-milestone4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-milestone5"
        }
    ]
}

Affected versions

3.*
3.4.0
3.4.1
3.4.2
3.5.0
3.5.1
3.6.0
3.6.0.CR1
3.6.0.CR2
3.6.1
3.6.2
3.6.3
3.7.0
3.7.1
3.8.0
3.8.1
3.8.2
3.8.3
3.8.3-01
3.8.4
3.8.5
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
4.*
4.0.0-milestone1
4.0.0-milestone2
4.0.0-milestone3
4.0.0-milestone4
4.0.0-milestone5
4.0.0.Beta1
4.0.0.Beta2
4.0.0.Beta3
4.0.0.CR1
4.0.0.CR2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17640.json"