CVE-2025-11965 MEDIUM

CVE-2025-11965

Vendor Eclipse Foundation
Product Vert.x
Weakness CWE-552 · Files accessible externally
Published October 22, 2025
Last update October 22, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them (e.g. '.git/config').

Key dates

02Disclosure timeline

October 22, 2025 CVE published
October 22, 2025 Record updated