CVE-2023-24815

Vert.x-Web is a set of building blocks for building web applications in the java programming language. When running vertx web applications that serve files using `StaticHandler` on Windows Operating Systems and Windows File Systems, if the mount point is a wildcard (`*`) then an attacker can exfiltrate any class path resource. When computing the relative path to locate the resource, in case of wildcards, the code: `return "/" + rest;` from `Utils.java` returns the user input (without validation) as the segment to lookup. Even though checks are performed to avoid escaping the sandbox, given that the input was not sanitized `\` are not properly handled and an attacker can build a path that is valid within the classpath. This issue only affects users deploying in windows environments and upgrading is the advised remediation path. There are no known workarounds for this vulnerability.

• CWE-22

• https://github.com/vert-x3/vertx-web/blob/62c0d66fa1c179ae6a4d57344631679a2b97e60f/vertx-web/src/main/java/io/vertx/ext/web/impl/Utils.java#L83Issue Tracking
• https://github.com/vert-x3/vertx-web/commit/9e3a783b1d1a731055e9049078b1b1494ece9c15Patch, Vendor Advisory
• https://github.com/vert-x3/vertx-web/security/advisories/GHSA-53jx-vvf9-4x38Exploit, Vendor Advisory
• https://github.com/vert-x3/vertx-web/blob/62c0d66fa1c179ae6a4d57344631679a2b97e60f/vertx-web/src/main/java/io/vertx/ext/web/impl/Utils.java#L83Issue Tracking
• https://github.com/vert-x3/vertx-web/commit/9e3a783b1d1a731055e9049078b1b1494ece9c15Patch, Vendor Advisory
• https://github.com/vert-x3/vertx-web/security/advisories/GHSA-53jx-vvf9-4x38Exploit, Vendor Advisory

Published

Feb 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2481 Compiler removal of buffer clearing in sli_se_opaque_im…7.5
• CVE-2023-24810Misskey is an open source, decentralized social media platfo…6.1
• CVE-2023-24811Misskey is an open source, decentralized social media platfo…6.1
• CVE-2023-24812Misskey is an open source, decentralized social media platfo…9.8
• CVE-2023-24813Dompdf is an HTML to PDF converter written in php. Due to th…9.8
• CVE-2023-24814TYPO3 is a free and open source Content Management Framework…6.1
• CVE-2023-24816IPython (Interactive Python) is a command shell for interact…7
• CVE-2023-24817RIOT-OS, an operating system for Internet of Things (IoT) de…7.5
• CVE-2023-24818RIOT-OS, an operating system that supports Internet of Thing…7.5
• CVE-2023-24819RIOT-OS, an operating system that supports Internet of Thing…9.8
• CVE-2023-2482The Responsive CSS EDITOR WordPress plugin through 1.0 does …7.2
• CVE-2023-24820RIOT-OS, an operating system that supports Internet of Thing…7.5