← Vulnerability feed

Vulnerability record · CVE-2018-12537 · published 14 August 2018

CVE-2018-12537: Eclipse vert.x improper input validation vulnerability

Eclipse · Vert.X

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response.

5.3 CVSS 3.0 Medium EPSS 2.5% · top 16.0% CWE-93 · CWE-93CWE-20 · Improper input validation
5.3CVSS 3.0 base score, v2 5.0
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
17 Jun 2026Last modified by NVD

Description

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://access.redhat.com/errata/RHSA-2018:2371 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3768 Third Party Advisory
https://bugs.eclipse.org/bugs/show_bug.cgi?id=536038 Issue TrackingThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1591072 Issue TrackingThird Party Advisory
https://github.com/eclipse/vert.x/commit/1bb6445226c39a95e7d07ce3caaf56828e8aab72 Third Party Advisory
https://github.com/eclipse/vert.x/issues/2470 Third Party Advisory
https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-021_vertx.txt Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2371 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3768 Third Party Advisory
https://bugs.eclipse.org/bugs/show_bug.cgi?id=536038 Issue TrackingThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1591072 Issue TrackingThird Party Advisory
https://github.com/eclipse/vert.x/commit/1bb6445226c39a95e7d07ce3caaf56828e8aab72 Third Party Advisory
https://github.com/eclipse/vert.x/issues/2470 Third Party Advisory
https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-021_vertx.txt Third Party Advisory

Track CVE-2018-12537 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-17640Eclipse vert.x relative path traversal vulnerabilityIn Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Bet…EPSS 2.0%9.8CVE-2018-12542Eclipse vert.x path traversal vulnerabilityIn version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted di…EPSS 2.2%9.8CVE-2018-12544Eclipse vert.x xml external entity (xxe) vulnerabilityIn version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate defense against X…EPSS 2.2%8.8CVE-2018-12540Eclipse vert.x cross-site request forgery vulnerabilityIn version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter.…EPSS 2.0%8.2CVE-2026-15075Eclipse vert.x information exposure vulnerabilityIn Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request…EPSS 0.20%8.2CVE-2026-15076Eclipse vert.x origin validation error vulnerabilityIn versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not vali…EPSS 0.20%6.9CVE-2026-6860Eclipse vert.x allocation without limits vulnerabilityA TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g. if…EPSS 0.31%6.9CVE-2024-8391Eclipse vert.x allocation without limits vulnerabilityIn Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server…EPSS 0.58%

Source: NIST National Vulnerability Database (record CVE-2018-12537), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.