CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system.

References

Affected packages

Git / github.com/eclipse/jetty.project

Affected ranges

Type

GIT

Repo

https://github.com/eclipse/jetty.project

Events

Introduced

1237b739c787a75a5f9e1f495b3f2c8284761499

Last affected

8c637489ae2bdc2d281b8db171e7427a47fdcc2b

Introduced

390f3200cce7f90f1f3ebc78013c1afea2f93db8

Fixed

84205aa28f11a4f31f2a3b86d1bba2cc8ab69827

Introduced

bf9d17540c7ae4c91be30c045a9485aa2030d3e5

Fixed

d5fc0523cfa96bfebfbda19606cad384d772f04c

Database specific

{
    "versions": [
        {
            "introduced": "9.0.0"
        },
        {
            "last_affected": "9.2.26"
        },
        {
            "introduced": "9.3.0"
        },
        {
            "fixed": "9.3.24"
        },
        {
            "introduced": "9.4.0"
        },
        {
            "fixed": "9.4.11"
        }
    ]
}

Affected versions

jetty-7.*

jetty-7.6.10.v20130312

jetty-7.6.11.v20130520

jetty-7.6.11.v20130725

jetty-7.6.12.v20130726

jetty-7.6.13.v20130910

jetty-7.6.6.v20120903

jetty-7.6.7.v20120910

jetty-7.6.8.v20121106

jetty-7.6.9.v20130131

jetty-8.*

jetty-8.1.10.v20130312

jetty-8.1.11.v20130520

jetty-8.1.12.v20130725

jetty-8.1.12.v20130726

jetty-8.1.13.v20130910

jetty-8.1.13.v20130916

jetty-8.1.6.v20120903

jetty-8.1.7.v20120910

jetty-8.1.8.v20121106

jetty-8.1.9.v20130131

jetty-9.*

jetty-9.0.0.M0

jetty-9.0.0.M1

jetty-9.0.0.M2

jetty-9.0.0.M3

jetty-9.0.0.M4

jetty-9.0.0.M5

jetty-9.0.0.RC0

jetty-9.0.0.RC1

jetty-9.0.0.RC2

jetty-9.0.0.RC3

jetty-9.0.0.v20130308

jetty-9.0.1.v20130408

jetty-9.0.2.v20130417

jetty-9.0.2.v20140415

jetty-9.0.3.v20130506

jetty-9.0.4.v20130621

jetty-9.0.4.v20130625

jetty-9.0.5.v20130813

jetty-9.0.5.v20130815

jetty-9.0.6.v20130919

jetty-9.0.6.v20130930

jetty-9.0.7.v20131031

jetty-9.0.7.v20131107

jetty-9.0.x

jetty-9.1.0.M0

jetty-9.1.0.RC0

jetty-9.1.0.RC1

jetty-9.1.0.RC2

jetty-9.1.0.v20131115

jetty-9.1.1.v20140108

jetty-9.1.2.v20140210

jetty-9.1.3.v20140225

jetty-9.1.4.v20140401

jetty-9.2.0.M0

jetty-9.2.0.M1

jetty-9.2.0.RC0

jetty-9.2.0.v20140523

jetty-9.2.0.v20140526

jetty-9.2.1.v20140609

jetty-9.2.10.v20150310

jetty-9.2.11.M0

jetty-9.2.11.v20150528

jetty-9.2.11.v20150529

jetty-9.2.12.M0

jetty-9.2.12.v20150709

jetty-9.2.13.v20150730

jetty-9.2.14.v20151106

jetty-9.2.15.v20160210

jetty-9.2.16.v20160414

jetty-9.2.17.v20160517

jetty-9.2.18.v20160721

jetty-9.2.19.v20160908

jetty-9.2.2.v20140723

jetty-9.2.20.v20161216

jetty-9.2.21.v20170120

jetty-9.2.22.v20170606

jetty-9.2.23.v20171218

jetty-9.2.24.v20180105

jetty-9.2.3.v20140905

jetty-9.2.4.v20141103

jetty-9.2.5.v20141112

jetty-9.2.6.v20141203

jetty-9.2.6.v20141205

jetty-9.2.7.v20150116

jetty-9.2.8.v20150217

jetty-9.2.9.v20150224

jetty-9.3.0.M0

jetty-9.3.0.v20150612

jetty-9.3.1.v20150714

jetty-9.3.10.M0

jetty-9.3.10.v20160621

jetty-9.3.11.M0

jetty-9.3.11.v20160721

jetty-9.3.12.v20160915

jetty-9.3.13.M0

jetty-9.3.13.v20161014

jetty-9.3.14.v20161028

jetty-9.3.15.v20161220

jetty-9.3.16.v20170120

jetty-9.3.17.v20170317

jetty-9.3.18.v20170406

jetty-9.3.19.v20170502

jetty-9.3.20.v20170531

jetty-9.3.21.M0

jetty-9.3.21.v20170918

jetty-9.3.22.v20171030

jetty-9.3.23.v20180228

jetty-9.3.3.v20150825

jetty-9.3.3.v20150827

jetty-9.3.4.v20151007

jetty-9.3.5.v20151012

jetty-9.3.6.v20151106

jetty-9.3.7.RC0

jetty-9.3.7.RC1

jetty-9.3.7.v20160115

jetty-9.3.8.RC0

jetty-9.3.8.v20160314

jetty-9.3.9.M1

jetty-9.3.9.v20160517

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "16.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "17.0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12536.json"