daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove @

patch-1
sullo 2023-04-10 17:11:26 -04:00
parent ada8a26e51
commit 8b07f85819
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cves/2021/CVE-2021-34429.yaml
View File

@ -2,7 +2,7 @@ id: CVE-2021-34429
info:
name: Eclipse Jetty - Information Disclosure
author: @bernardofsr, @am0nt31r0
author: bernardofsr,am0nt31r0
severity: medium
description: |
Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.