8.2
Élevée
CVE-2026-76184 In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to…
Description
In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizing the path to `/evil`, and will therefore follow the redirect sending the `Authorization` header for `/secure` to `/evil`. This also mean that the attacker must have an evil application deployed on the same domain as the target.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Eclipse Jetty 12.1 | 12.1.0 → 12.1.12 | Pas de correctif indiqué |
| Eclipse Jetty 12.0 | 12.0.0 → 12.0.38 | Pas de correctif indiqué |
| Eclipse Jetty 11.0 | 11.0.0 → 11.0.32 | Pas de correctif indiqué |
| Eclipse Jetty 10.0 | 10.0.0 → 10.0.32 | Pas de correctif indiqué |
| Eclipse Jetty 9.4 | 9.4.0 → 9.4.64 | Pas de correctif indiqué |
Références
- github.com github.com
- gitlab.eclipse.org gitlab.eclipse.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Eclipse Jetty
Les 16 CVE de Eclipse Jetty →
CVE-2026-18661
In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec…
8.8
Élevée
CVE-2026-77711
When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy…
8.2
Élevée
CVE-2026-76182
In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such…
6.9
Moyenne
CVE-2026-12611
A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually…
8.7
Élevée