CVE-2016-4800
CriticalSummary
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
Risk Assessment
Attackers may gain access to protected resources, potentially leading to the disclosure of sensitive data or compromise of system integrity.
Recommendation
It is recommended to update Eclipse Jetty to version 9.3.9 or later to mitigate this vulnerability.
Original NVD description (English source)
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.