Threats tagged 'ghsa-c6p9-42vh-5r44'

Eclipse Vert.x versions 4.0.0 through 4.5.35 and 5.0.0 through 5.2.2 have a vulnerability in the CachingWebClient component when shared across users. A cacheable response specific to one user but not marked private or no-store can be stored in a shared cache and served to other users, potentially exposing authenticated content or session cookies. This can lead to session fixation or hijacking.