CVE-2026-76184
CVE-2026-76184
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizing the path to `/evil`, and will therefore follow the redirect sending the `Authorization` header for `/secure` to `/evil`. This also mean that the attacker must have an evil application deployed on the same domain as the target.
CVSS 8.2 · High · EPSS 0.3%
- Published
- Updated
Stack: system
Affected products and versions
eclipse jetty
- Versions
- ≥ 12.1.0, ≤ 12.1.12: Affected (semver)
- ≥ 12.0.0, ≤ 12.0.38: Affected (semver)
- ≥ 11.0.0, ≤ 11.0.32: Affected (semver)
- ≥ 10.0.0, ≤ 10.0.32: Affected (semver)
- ≥ 9.4.0, ≤ 9.4.64: Affected (semver)
No fix published
jetty12 Debian:13
- Versions
- 12.0.17-3
- 12.0.17-3.1
- 12.0.17-3.1~deb13u1
- 12.0.32-1
- 12.0.32-2
- 12.0.33-1
- 12.0.39-1
- 12.0.40-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
jetty12 Debian:14
- Versions
- 12.0.17-3
- 12.0.17-3.1
- 12.0.17-3.1~deb13u1
- 12.0.32-1
- 12.0.32-2
- 12.0.33-1
- 12.0.39-1
- 12.0.40-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
jetty9 Debian:12
- Versions
- 9.4.50-4
- 9.4.50-4+deb12u1
- 9.4.50-4+deb12u2
- 9.4.50-4+deb12u3
- 9.4.51-1
- 9.4.51-2
- 9.4.52-1
- 9.4.53-1
- 9.4.54-1
- 9.4.55-1
- 9.4.56-1
- 9.4.57-0+deb12u1
- 9.4.57-1
- 9.4.57-1.1
- 9.4.57-1.1~deb12u1
- 9.4.57-1.1~deb13u1
- 9.4.58-1
- 9.4.58-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
jetty9 Debian:13
- Versions
- 9.4.57-1
- 9.4.57-1.1
- 9.4.57-1.1~deb12u1
- 9.4.57-1.1~deb13u1
- 9.4.58-1
- 9.4.58-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
jetty9 Debian:14
- Versions
- 9.4.57-1
- 9.4.57-1.1
- 9.4.57-1.1~deb12u1
- 9.4.57-1.1~deb13u1
- 9.4.58-1
- 9.4.58-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
jetty Ubuntu:14.04:LTS
- Versions
- 6.1.26-1ubuntu1
- 6.1.26-1ubuntu1.1
- 6.1.26-1ubuntu1.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
jetty Ubuntu:16.04:LTS
- Versions
- 6.1.26-5
- 6.1.26-5ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published