Record status Published
Identifier year (not publication year) 2026
Source publication Oct 15, 2026
Source updated Oct 15, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context.
However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when applied to the template becomes `index?p=/s&a=1`, which is interpreted as 2 query parameters: `p=/s` and `a=1`, rather than just one query parameter `p` whose value is `/s&a=1`.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Eclipse Jetty
Vendor Eclipse Foundation
Product Eclipse Jetty
Platforms Unknown
Default status unaffected
Package org.eclipse.jetty.ee10:jetty-ee10-fcgi-proxy
Eclipse Jetty · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 12.1.0 affectedsemver Unavailable 12.1.12 None listed 12.0.0 affectedsemver Unavailable 12.0.38 None listed
Eclipse Jetty
Vendor Eclipse Foundation
Product Eclipse Jetty
Platforms Unknown
Default status unaffected
Package org.eclipse.jetty.ee11:jetty-ee11-fcgi-proxy
Eclipse Jetty · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 12.1.0 affectedsemver Unavailable 12.1.12 None listed
Eclipse Jetty
Vendor Eclipse Foundation
Product Eclipse Jetty
Platforms Unknown
Default status unaffected
Package org.eclipse.jetty.ee8:jetty-ee8-fcgi-proxy
Eclipse Jetty · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 12.1.0 affectedsemver Unavailable 12.1.12 None listed 12.0.0 affectedsemver Unavailable 12.0.38 None listed
Eclipse Jetty
Vendor Eclipse Foundation
Product Eclipse Jetty
Platforms Unknown
Default status unaffected
Package org.eclipse.jetty.ee9:jetty-ee9-fcgi-proxy
Eclipse Jetty · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 12.1.0 affectedsemver Unavailable 12.1.12 None listed 12.0.0 affectedsemver Unavailable 12.0.38 None listed
Eclipse Jetty
Vendor Eclipse Foundation
Product Eclipse Jetty
Platforms Unknown
Default status unaffected
Package org.eclipse.jetty.fcgi:fcgi-server
Eclipse Jetty · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 11.0.0 affectedsemver Unavailable 11.0.32 None listed 10.0.0 affectedsemver Unavailable 10.0.32 None listed 9.4.0 affectedsemver Unavailable 9.4.64 None listed
Eclipse Jetty
Vendor Eclipse Foundation
Product Eclipse Jetty
Platforms Unknown
Default status unaffected
Package org.eclipse.jetty:jetty-server
Eclipse Jetty · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 12.1.0 affectedsemver Unavailable 12.1.12 None listed 12.0.0 affectedsemver Unavailable 12.0.38 None listed