Description
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
Remediation
References
Related Vulnerabilities
Joomla! Core 1.6.0 Spam (1.6.0)
Jenkins Incorrect Authorization Vulnerability (CVE-2018-1999004)
OpenSSL Cryptographic Issues Vulnerability (CVE-2000-1254)
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-2050)
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-44528)