CVE-2021-28169

MEDIUMNuclei

Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2021-28169 has a selected CVSS score of 5.3 (medium); EIP currently links 1 Nuclei template.

Description

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Aug 19, 2022 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

3
ProductSourceVersion range

Eclipse Jetty

Browse The Eclipse Foundation / Eclipse Jetty
CVE ListThrough 9.4.40affected
Through 10.0.2affected
Through 11.0.2affected

jetty

Browse eclipse / jetty
VulnCheckVersion data not supplied

org.eclipse.jetty:jetty-servlets

Browse Maven / org.eclipse.jetty:jetty-servlets
GitHub AdvisoryBefore 9.4.41 · Fixed in 9.4.41affected
10.0.0 to < 10.0.3 · Fixed in 10.0.3affected
11.0.0 to < 11.0.3 · Fixed in 11.0.3affected

Nuclei templates

1
ProjectDiscoveryMEDIUMEclipse Jetty ConcatServlet - Information DisclosureCVSS 5.3

Eclipse Jetty through 9.4.40, through 10.0.2, and through 11.0.2 is susceptible to information disclosure. Requests to the ConcatServlet with a doubly encoded path can access protected resources within the WEB-INF directory, thus enabling an attacker to potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Impact

An attacker can exploit this vulnerability to access sensitive information, potentially leading to further attacks or unauthorized access.

Remediation

Upgrade to Eclipse Jetty version 9.4.40 or later to mitigate this vulnerability.

WeaknessesCWE-200
Authorspikpikcu
Template tagscve2021cvejettyeclipsevkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CPE: cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Shodan: cpe:"cpe:2.3:a:eclipse:jetty"
https://twitter.com/sec715/status/1406787963569065988 https://github.com/eclipse/jetty.project/security/advisories/GHSA-gwcr-j4wh-j3cq https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-28169 https://lists.apache.org/thread.html/r04a4b4553a23aff26f42635a6ae388c3b162aab30a88d12e59d05168@%3Cjira.kafka.apache.org%3E

Source: ProjectDiscovery

References

Showing 12 of 43