https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 18:24:50 +0000 https://vulnerability.circl.lu/vuln/cve-2025-11966 <p><strong>Affected:</strong> Eclipse Foundation Vert.x</p> <p>In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when &#34;directory listing&#34; is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename files or directories within a served path can craft filenames containing malicious script or HTML content, leading to stored cross-site scripting (XSS) that executes in the context of users viewing the affected directory listing.</p> <p><strong>Affected:</strong> Eclipse Foundation Vert.x</p> <p>In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when &#34;directory listing&#34; is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename files or directories within a served path can craft filenames containing malicious script or HTML content, leading to stored cross-site scripting (XSS) that executes in the context of users viewing the affected directory listing.</p> https://vulnerability.circl.lu/vuln/cve-2025-11966