Medium severity · published Aug 14, 2018
CVE-2018-12537
In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value
5.3
CVSS
2.5%
EPSS
No
On KEV
Description
In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EV
Eclipse Vert.x · The Eclipse Foundation
3.0 before unspecified; through 3.5.1 · source: vendor
VE
Vert.x · Eclipse
3.0.0 through 3.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-12537
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-12537
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2371
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3768
Issue Tracking
https://bugs.eclipse.org/bugs/show_bug.cgi?id=536038
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1591072
Third Party Advisory
https://github.com/eclipse/vert.x/commit/1bb6445226c39a95e7d07ce3caaf56828e8aab72
Third Party Advisory
https://github.com/eclipse/vert.x/issues/2470