CVE-2019-17640

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

CVE-2019-17640

CVE-2019-17640 affects Eclipse Vert.x: the built‑in static file handler (StaticHandler ) in Vert.x 3.4.x up to 3.9.4, and in several 4.x milestones/betas, does not correctly process backslashes on Windows, allowing escape of the webroot folder to the current working directory. The root cause is i...