Lucene search
+L

5 matches found

osv_ghsa
osv_ghsa
•added 2018/10/19 4:16 p.m.•41 views

GHSA-872G-2H8H-362Q Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

9.8CVSS7AI score0.06538EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2018/10/19 4:16 p.m.•60 views

Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

9.8CVSS6.1AI score0.06538EPSS
SaveExploits0References8Affected Software1
osv_cve
osv_cve
•added 2017/04/13 2:59 p.m.•38 views

CVE-2016-4800

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

9.8CVSS6.9AI score0.06538EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2017/04/13 2:00 p.m.•66 views

CVE-2016-4800

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

9.8CVSS7.2AI score0.06538EPSS
SaveExploits0
Cvelist
Cvelist
•added 2017/04/13 2:00 p.m.•51 views

CVE-2016-4800

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

9.3AI score0.06538EPSS
SaveExploits0References6
Rows per page
Query Builder