Skip to content
OpenAdvisories

Package · Maven

org.eclipse.jetty:jetty-util

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-8384

    Eclipse Jetty: Path parameter traversal

    In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it…

    Eclipse Foundation Eclipse Jetty druid trino Debian Ubuntu Wolfi Maven