CVE-2018-12544

Name of the Vulnerable Software and Affected Versions Eclipse Vert.x versions 3.5.Beta1 through 3.5.3

Description The OpenAPI XML type validator in Eclipse Vert.x creates XML parsers without adequate protection against XML attacks when a developer uses it to validate a provided schema.

Recommendations For versions 3.5.Beta1 through 3.5.3, consider disabling the OpenAPI XML type validator until a patch is available to prevent potential XML attacks. Restrict the use of XML parsers to minimize the risk of exploitation.