Lucene search
+L

23 matches found

Github Security Blog
Github Security Blog
added 6 days ago19 views

Eclipse Jetty: Path parameter traversal

Description as reported Summary In Jetty 12.1.8, org.eclipse.jetty.util.URIUtil.canonicalPath may leave dot-dot path segments unnormalized when a semicolon path parameter marker is followed by a slash and a dot segment. A minimal example is: /public;/../admin/secret In my local reproduction,...

5.3CVSS5.5AI score0.00228EPSS
SaveExploits1References10Affected Software1
Rows per page
Query Builder