CVE-2018-12537

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-93 CWE-20

Affected software

Vendor	Product	Versions
The Eclipse Foundation	Eclipse Vert.x	>= 3.0, < unspecified; >= unspecified, <= 3.5.1

References

https://access.redhat.com/errata/RHSA-2018:2371Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3768Third Party Advisory
https://bugs.eclipse.org/bugs/show_bug.cgi?id=536038Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1591072Issue Tracking, Third Party Advisory
https://github.com/eclipse/vert.x/commit/1bb6445226c39a95e7d07ce3caaf56828e8aab72Third Party Advisory
https://github.com/eclipse/vert.x/issues/2470Third Party Advisory
https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-021_vertx.txtThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:2371Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3768Third Party Advisory
https://bugs.eclipse.org/bugs/show_bug.cgi?id=536038Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1591072Issue Tracking, Third Party Advisory
https://github.com/eclipse/vert.x/commit/1bb6445226c39a95e7d07ce3caaf56828e8aab72Third Party Advisory
https://github.com/eclipse/vert.x/issues/2470Third Party Advisory
https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-021_vertx.txtThird Party Advisory

Timeline

Published: Aug 14, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-125388.8In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSes CVE-2018-125397.8In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM CVE-2018-12546.1RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability. A remote CVE-2018-125408.8In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form p CVE-2018-125416.5In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the h CVE-2018-125429.8In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a rest CVE-2018-125437.5In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is n CVE-2018-125449.8In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate defense CVE-2018-125457.5In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SET CVE-2018-125466.5In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that top CVE-2018-125479.8In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This aff CVE-2018-125489.8In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which