The vulnerability of the DefaultServlet component of the Jetty HTTP server allows a attacker to gain unauthorized access to protected information.

The vulnerability of the DefaultServlet component in the Jetty HTTP server is related to errors in error handling when incorrect requests are used. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information by displaying the InvalidPathException message,...

Eclipse Jetty Server Information Disclosure Vulnerability

Eclipse Jetty Server is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . An information disclosure vulnerability exists in Eclipse Jetty Server version 9.x that stems from an error response with an InvalidPathException message containing sensitive...

UBUNTU-CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...