Lucene search
K

5 matches found

OSV
OSV
added 2018/10/19 4:16 p.m.21 views

GHSA-872G-2H8H-362Q Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

9.8CVSS7AI score0.00609EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2018/10/19 4:16 p.m.23 views

Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

9.8CVSS6.1AI score0.00609EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2017/04/13 2:59 p.m.19 views

CVE-2016-4800

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

9.8CVSS6.9AI score
Exploits0References6
Cvelist
Cvelist
added 2017/04/13 2:0 p.m.15 views

CVE-2016-4800

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

9.3AI score0.00609EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2017/04/13 2:0 p.m.26 views

CVE-2016-4800

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

9.8CVSS7.2AI score0.00609EPSS
Exploits0
Rows per page
Query Builder