CVEs-PoC/2021/CVE-2021-28164.md

CVE-2021-28164

Description

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.

POC

Reference

• http://packetstormsecurity.com/files/164590/Jetty-9.4.37.v20210219-Information-Disclosure.html
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujan2022.html
• https://www.oracle.com/security-alerts/cpuoct2021.html

Github

• https://github.com/20142995/Goby
• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Awrrays/FrameVul
• https://github.com/CLincat/vulcat
• https://github.com/HimmelAward/Goby_POC
• https://github.com/NyxAzrael/Goby_POC
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/XiaomingX/awesome-poc-for-red-team
• https://github.com/Z0fhack/Goby_POC
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/bigblackhat/oFx
• https://github.com/cc8700619/poc
• https://github.com/g1san/Agents-for-Vulnerable-Dockers-and-related-Benchmarks
• https://github.com/jammy0903/-jettyCVE-2021-28164-
• https://github.com/n0-traces/cve_monitor
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/openx-org/BLEN
• https://github.com/pen4uin/awesome-vulnerability-research
• https://github.com/pen4uin/vulnerability-research
• https://github.com/pen4uin/vulnerability-research-list
• https://github.com/soosmile/POC