PT-2026-114848 · Eclipse Foundation · Eclipse Jetty
CVE-2026-76184
·
Published
2026-10-15
·
Updated
2026-10-15
CVSS v4.0
8.2
High
| Vector | AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
In Eclipse Jetty, HttpClient may receive a redirect of the form:
/secure/../evil
If an attacker is able to control the redirects, then HttpClient matches authentication credentials against
/secure rather than normalizing the path to /evil, and will therefore follow the redirect sending the Authorization header for /secure to /evil.This also mean that the attacker must have an evil application deployed on the same domain as the target.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Eclipse Jetty