Red Hat Security Advisory

RHSA-2018:2371

Red Hat OpenShift Application Runtimes security and bug fix update

Released 2018-08-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Text-Only RHOAR

Fixes 2 records

TI-2018-08999 CVE-2018-12540 · GHSA-rvgg-f8qm-6h7j

Cross-site request forgery in Eclipse Vert.x

MEDIUM 42

In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01994 Published 2018-07-12 Fixed in 3.5.3 CWE-352

TI-2018-08996 CVE-2018-12537 · GHSA-6cw8-7j6c-hccp

Improper input validation in Eclipse Vert.x

LOW 29

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02482 Published 2018-08-14 Fixed in 3.5.2 CWE-93