CVE-2016-4800
13.04.2017, 14:59
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.Enginsight
| Vendor | Product | Version |
|---|---|---|
| eclipse | jetty | 9.3.0 |
| eclipse | jetty | 9.3.0:m0 |
| eclipse | jetty | 9.3.0:m1 |
| eclipse | jetty | 9.3.0:maintenance2 |
| eclipse | jetty | 9.3.0:rc0 |
| eclipse | jetty | 9.3.0:rc1 |
| eclipse | jetty | 9.3.1 |
| eclipse | jetty | 9.3.2 |
| eclipse | jetty | 9.3.3 |
| eclipse | jetty | 9.3.4 |
| eclipse | jetty | 9.3.4:rc0 |
| eclipse | jetty | 9.3.4:rc1 |
| eclipse | jetty | 9.3.5 |
| eclipse | jetty | 9.3.6 |
| eclipse | jetty | 9.3.7 |
| eclipse | jetty | 9.3.7:rc0 |
| eclipse | jetty | 9.3.7:rc1 |
| eclipse | jetty | 9.3.8 |
| eclipse | jetty | 9.3.8:rc0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References