CVE-2018-12536: Generation of Error Message Containing Sensitive Information

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

PT-2018-3159

Name of the Vulnerable Software and Affected Versions Eclipse Jetty Server versions 9.x Description The issue is related to the DefaultServlet's handling of intentionally bad queries that do not match a dynamic url-pattern. When such a query is handled by the DefaultServlet's static file serving,...