Lucene search
Redhat.comRH:CVE-2018-12540HistoryJul 12, 2018 - 6:19 p.m.
CVE-2018-12540
2018-07-1218:19:11
redhat.com
access.redhat.com
7
0.011 Low
EPSS
Percentile
84.7%
In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.
Related
osv
osv
High severity vulnerability that affects io.vertx:vertx-web
2018-10-17 16:19:43
CVE-2018-12540
2018-07-12 14:29:00
prion
prion
Design/Logic Flaw
2018-07-12 14:29:00
cve
cve
CVE-2018-12540
2018-07-12 14:29:00
nvd
nvd
CVE-2018-12540
2018-07-12 14:29:00
veracode
veracode
Replay Attacks
2018-07-18 10:04:01
cvelist
cvelist
CVE-2018-12540
2018-07-12 14:00:00
github
github
High severity vulnerability that affects io.vertx:vertx-web
2018-10-17 16:19:43
redhat
redhat