Debian/jetty9: medium 5.3
For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security co
Action: Upgrade jetty9 to 9.4.39-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.4.39-3 | - |
Fixed versions
| 9.4.39-3 |
Sources
published · modified · JSON