The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x prior to 9.3.9 on Windows allows remote malicious users to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
eclipse jetty 9.3.7 |
||
eclipse jetty 9.3.4 |
||
eclipse jetty 9.3.5 |
||
eclipse jetty 9.3.6 |
||
eclipse jetty 9.3.1 |
||
eclipse jetty 9.3.2 |
||
eclipse jetty 9.3.0 |
||
eclipse jetty 9.3.8 |
||
eclipse jetty 9.3.3 |