https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T06:16:42.264438+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-28169 CVE-2021-28169 2026-09-29T06:16:42.429820+00:00

Affected: The Eclipse Foundation Eclipse Jetty

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.