Exploitation Summary
EIP tracks 3 public exploits for CVE-2018-12542. PoCs published by dawetmaster, andikahilmy, shoucheng3.
AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2018-12542, demonstrating a vulnerability in Vert.x Web's SockJS service proxy. The code includes examples and test cases that showcase the vulnerable service proxy implementation.
Description
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location that is outside of that directory when running on Windows Operating Systems.
Exploits (3)
This repository contains a functional proof-of-concept for CVE-2018-12542, demonstrating a vulnerability in Vert.x Web's SockJS service proxy. The code includes examples and test cases that showcase the vulnerable service proxy implementation.
This repository contains a functional proof-of-concept for CVE-2018-12542, demonstrating a vulnerability in Vert.x Web's SockJS service proxy. The code includes examples of service registration and SockJS bridge configuration, which can be used to exploit the vulnerability.
This repository contains a proof-of-concept for CVE-2018-12542, demonstrating how Vert.x SockJS Service Proxy can be exploited due to improper event bus bridge permissions. The example code shows how to register a service and configure the SockJS bridge to allow inbound/outbound traffic to a designated address, which could be abused for unauthorized access.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H