| Connection leaking on idle timeout when TCP congestedCVE-2024-22201 · GHSA-RGGV-CV7R-MW98 |
org.eclipse.jetty.http2:http2-commonorg.eclipse.jetty.http2:jetty-http2-common |
MavenRed Hat |
High
|
Fix reported |
|
| Jetty vulnerable to errant command quoting in CGI ServletCVE-2023-36479 · GHSA-3GH6-V5V9-6V9J |
org.eclipse.jetty.ee10:jetty-ee10-servletsorg.eclipse.jetty.ee8:jetty-ee8-servlets |
MavenRed Hat |
Low
|
Fix reported |
|
| Jetty's OpenId Revoked authentication allows one requestCVE-2023-41900 · GHSA-PWH8-58VV-VW48 |
org.eclipse.jetty:jetty-openidRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
Low
|
Fix reported |
|
| Jetty accepts "+" prefixed value in Content-LengthCVE-2023-40167 · GHSA-HMR7-M48G-48F6 |
org.eclipse.jetty:jetty-httpA-MQ Clients 2/jetty-http |
MavenRed Hat |
Medium
|
Fix reported |
|
| Encoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429 · GHSA-VJV5-GP2W-65VM |
org.eclipse.jetty:jetty-webappRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
Medium
|
Fix reported |
|
| Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure VulnerabilityCVE-2021-28169 · GHSA-GWCR-J4WH-J3CQ |
org.eclipse.jetty:jetty-servletsRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
Medium
|
Fix reported |
|
| Local Temp Directory Hijacking VulnerabilityCVE-2020-27216 · GHSA-G3WG-6MCF-8JJ6 |
org.eclipse.jetty:jetty-webapporg.mortbay.jetty:jetty-webapp |
MavenRed Hat |
High
|
Fix reported |
|
| Authorization Before Parsing and Canonicalization in jettyCVE-2021-28164 · GHSA-V7FF-8WCX-GMC5 |
org.eclipse.jetty:jetty-webappRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
Medium
|
Fix reported |
|
| SessionListener can prevent a session from being invalidated breaking logoutCVE-2021-34428 · GHSA-M6CP-VXJX-65J6 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
Low
|
Fix reported |
|
| Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-serverCVE-2018-12545 · GHSA-H2F4-V4C4-6WX4 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
High
|
Fix reported |
|
| XXE in Apache Standard TaglibsCVE-2015-0254 · GHSA-6X4W-8W53-XRVV |
org.apache.taglibs:taglibs-standard-implorg.apache.taglibs:taglibs-standard |
MavenRed Hat |
High
|
Fix reported |
|
| Installation information leak in Eclipse JettyCVE-2019-10247 · GHSA-XC67-HJX6-CGG6 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 6/jetty-eclipse |
MavenRed Hat |
Medium
|
Fix reported |
|
| Critical severity vulnerability that affects org.eclipse.jetty:jetty-serverCVE-2017-7657 · GHSA-VGG8-72F2-QM23 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 6/jetty-eclipse |
MavenRed Hat |
Critical
|
Fix reported |
|
| Jetty vulnerable to exposure of sensitive information due to observable discrepancyCVE-2017-9735 · GHSA-WFCC-PFF6-RGC5 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 6/jetty-eclipse |
MavenRed Hat |
High
|
Fix reported |
|
| Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling)CVE-2017-7656 · GHSA-84Q7-P226-4X5W |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 6/jetty-eclipse |
MavenRed Hat |
High
|
Fix reported |
|
| Cross-site Scripting in Eclipse JettyCVE-2019-10241 · GHSA-7VX9-XJHR-RW6H |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 6/jetty-eclipse |
MavenRed Hat |
Medium
|
Fix reported |
|
| Eclipse Jetty Server generates error message containing sensitive informationCVE-2018-12536 · GHSA-9RGV-H7X4-QW8G |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
Medium
|
Fix reported |
|
| Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)CVE-2017-7658 · GHSA-6X9X-8QW9-9PP6 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 6/jetty-eclipse |
MavenRed Hat |
Critical
|
Fix reported |
|
| Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resourcesCVE-2021-28165 · GHSA-26VR-8J45-3R4W |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
High
|
Fix reported |
|
| Directory exposure in jettyCVE-2021-28163 · GHSA-J6QJ-J888-VVGQ |
org.eclipse.jetty:jetty-deployRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
Low
|
Fix reported |
|
