要点
- CVE-2019-10246 是影响 org.eclipse.jetty:jetty-server, jetty (eclipse), oncommand system manager (netapp) 的中危 (CVSS 5.3)漏洞。
- 未来 30 天内被利用的概率（EPSS）：4.1%，高于 90.7% 的漏洞。
- 修复：升级到 9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418 或更高版本。
Description
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.
NVD description
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.
org.eclipse.jetty:jetty-server 的其他漏洞
查看全部 →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free