Lucene search
GoogleOSV:GHSA-872G-2H8H-362QHistoryOct 19, 2018 - 4:16 p.m.
Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request
2018-10-1916:16:16
Google
osv.dev
12
EPSS
0.014
Percentile
86.8%
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
References
dev.eclipse.org/mhonarc/lists/jetty-announce/msg00092.html
www.ocert.org/advisories/ocert-2016-001.html
www.securityfocus.com/bid/90945
www.zerodayinitiative.com/advisories/ZDI-16-362
github.com/advisories/GHSA-872g-2h8h-362q
nvd.nist.gov/vuln/detail/CVE-2016-4800
security.netapp.com/advisory/ntap-20190307-0006
www.oracle.com/security-alerts/cpuoct2020.html
Related
redhatcve
redhatcve
CVE-2016-4800
2016-05-30 13:48:43
prion
prion
Design/Logic Flaw
2017-04-13 14:59:00
ubuntucve
ubuntucve
CVE-2016-4800
2017-04-13 00:00:00
osv
osv
CVE-2016-4800
2017-04-13 14:59:01
debiancve
debiancve
CVE-2016-4800
2017-04-13 14:59:01
nvd
nvd
CVE-2016-4800
2017-04-13 14:59:01
cve
cve
CVE-2016-4800
2017-04-13 14:59:01
zdi
zdi
Eclipse Jetty Protected Resource Bypass Vulnerability
2016-06-03 00:00:00
cvelist
cvelist
CVE-2016-4800
2017-04-13 14:00:00
github
github
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00