Riskcovery

CVE-2026-76182

State
Published
Severity
6.9 Medium
Published
Oct 15, 2026
Updated
Oct 15, 2026
Reserved
Aug 19, 2026

Read the record on cve.org

Description

In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context.

However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when applied to the template becomes `index?p=/s&a=1`, which is interpreted as 2 query parameters: `p=/s` and `a=1`, rather than just one query parameter `p` whose value is `/s&a=1`.

Scores

CVSSScoreVectorSource
4.06.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:Neclipse

Weaknesses

Affected Products

ProductVersions
Eclipse JettyEclipse Foundation
  • 12.1.0 through 12.1.12Affected
  • 12.0.0 through 12.0.38Affected
Eclipse JettyEclipse Foundation
  • 12.1.0 through 12.1.12Affected
Eclipse JettyEclipse Foundation
  • 12.1.0 through 12.1.12Affected
  • 12.0.0 through 12.0.38Affected
Eclipse JettyEclipse Foundation
  • 12.1.0 through 12.1.12Affected
  • 12.0.0 through 12.0.38Affected
Eclipse JettyEclipse Foundation
  • 11.0.0 through 11.0.32Affected
  • 10.0.0 through 10.0.32Affected
  • 9.4.0 through 9.4.64Affected
Eclipse JettyEclipse Foundation
  • 12.1.0 through 12.1.12Affected
  • 12.0.0 through 12.0.38Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.