All products

Red Hat Integration Service Registry/jetty-server

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure VulnerabilityCVE-2021-28169 · GHSA-GWCR-J4WH-J3CQ org.eclipse.jetty:jetty-servletsRed Hat Enterprise Linux 7/jetty MavenRed Hat Medium Fix reported
Authorization Before Parsing and Canonicalization in jettyCVE-2021-28164 · GHSA-V7FF-8WCX-GMC5 org.eclipse.jetty:jetty-webappRed Hat Enterprise Linux 7/jetty MavenRed Hat Medium Fix reported
SessionListener can prevent a session from being invalidated breaking logoutCVE-2021-34428 · GHSA-M6CP-VXJX-65J6 org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 7/jetty MavenRed Hat Low Fix reported
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resourcesCVE-2021-28165 · GHSA-26VR-8J45-3R4W org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 7/jetty MavenRed Hat High Fix reported
Directory exposure in jettyCVE-2021-28163 · GHSA-J6QJ-J888-VVGQ org.eclipse.jetty:jetty-deployRed Hat Enterprise Linux 7/jetty MavenRed Hat Low Fix reported