vert-x3 vulnerabilities

Products

• vertx-stomp 1
• vertx-web 1

Latest vert-x3 CVEs

Newest publication first

1. CVE-2023-32081 Vert.x STOMP server process client frames that would not send initially a connect frame

   Published 2023-05-12

   Medium·CVSS 6.5 EPSS 0.51%

   Vert.x STOMP is a vert.x implementation of the STOMP specification that provides a STOMP server and client. From versions 3.1.0 until 3.9.16 and 4.0.0 until 4.4.2, a Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame r...

2. CVE-2023-24815 Disclosure of classpath resources on Windows when mounted on a wildcard route in vertx-web

   Published 2023-02-09

   Medium·CVSS 5.3 EPSS 0.92%

   Vert.x-Web is a set of building blocks for building web applications in the java programming language. When running vertx web applications that serve files using StaticHandler on Windows Operating Systems and Windows File Systems, if the mount point is a wildcard (*) then an atta...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.