Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jetty 访问控制错误漏洞
Vulnerability Description
Jetty是Eclipse基金会的一个自由和开源项目，是一个基于Java的Web服务器和Java Servlet容器。 Jetty 9.3.x版本的PathResource类中的路径标准化机制存在安全漏洞。攻击者可借助恶意的URL利用该漏洞获取受保护资源的访问权限，破坏应用程序的过滤器。
CVSS Information
N/A
Vulnerability Type
N/A