https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 02:31:30 +0000 https://db.gcve.eu/vuln/cve-2026-76184 <p><strong>Affected:</strong> Eclipse Foundation Eclipse Jetty</p> <p>In Eclipse Jetty, HttpClient may receive a redirect of the form:</p> <p>```</p> <p>/secure/../evil</p> <p>```</p> <p>If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizing the path to `/evil`, and will therefore follow the redirect sending the `Authorization` header for `/secure` to `/evil`.</p> <p>This also mean that the attacker must have an evil application deployed on the same domain as the target.</p> <p><strong>Affected:</strong> Eclipse Foundation Eclipse Jetty</p> <p>In Eclipse Jetty, HttpClient may receive a redirect of the form:</p> <p>```</p> <p>/secure/../evil</p> <p>```</p> <p>If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizing the path to `/evil`, and will therefore follow the redirect sending the `Authorization` header for `/secure` to `/evil`.</p> <p>This also mean that the attacker must have an evil application deployed on the same domain as the target.</p> https://db.gcve.eu/vuln/cve-2026-76184