In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them (e.g. '.git/config').

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for
    restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized
    users to retrieve files within them (e.g. '.git/config'). (CVE-2025-11965)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for     restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized     users to retrieve files within them (e.g. '.git/config'). (CVE-2025-11965)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
457598	Echo: io.vertx:vertx-web, vertx-web: security update to 4.5.22	Tenable Cloud Security	Echo Local Security Checks	Local	medium
457598	Echo: io.vertx:vertx-web, vertx-web: security update to 4.5.22	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
271575	Linux Distros Unpatched Vulnerability : CVE-2025-11965	Nessus	Misc.	Local	medium
435729	SCA: security update for io.vertx:vertx-web (GHSA-h5fg-jpgr-rv9c)	Tenable Cloud Security	SCA Checks	Local	medium
435729	SCA: security update for io.vertx:vertx-web (GHSA-h5fg-jpgr-rv9c)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2025-11965

medium

Tenable Plugins

medium

medium

medium

medium

medium