CVE-2019-17640

CRITICAL

Eclipse Vert.x 3.4.0-3.9.4 - Path Traversal via StaticHandler on Windows

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-17640. PoCs published by shoucheng3.

AI-analyzed exploit summary This repository contains the source code for Vert.x Web's FreeMarker template engine, which is vulnerable to CVE-2019-17640. The code includes the implementation details of the template engine, but does not contain an explicit exploit or proof-of-concept code.

Description

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the current working directory.

Exploits (1)

nomisec WRITEUP

by shoucheng3 · poc

https://github.com/shoucheng3/vert-x3__vertx-web_CVE-2019-17640_3-9-3

View Code ZIP pw:eip

This repository contains the source code for Vert.x Web's FreeMarker template engine, which is vulnerable to CVE-2019-17640. The code includes the implementation details of the template engine, but does not contain an explicit exploit or proof-of-concept code.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Theoretical

Target: Vert.x Web (FreeMarker template engine) version 3.9.3

No auth needed

Prerequisites: Access to a Vert.x Web application using the FreeMarker template engine

MITRE ATT&CK