| Advisory ID |
project_kb_statements/CVE-2016-4800 |
| Aliases |
|
| Summary |
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
|
| Status |
Published |
|
Exploitability |
0.5
|
| Weighted Severity |
0.0
|
| Risk |
|
| Affected and Fixed Packages |
Package Details
|
| Introduced and Fixed Package Commit Patches |
Package Commit Patches Details
|
Weaknesses (0)
| Reference id |
Reference type |
URL |
|
There are no known references.
|
|
No exploits are available.
|
No EPSS data available for this advisory.
| Patch URL |
|
There are no known patches.
|
|
There are no known vectors.
|
There are no SSVC decisions available.