Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/9655?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9655?format=api", "vulnerability_id": "VCID-qhq5-21uh-jkfm", "summary": "", "aliases": [ { "alias": "CVE-2021-34429" }, { "alias": "GHSA-vjv5-gp2w-65vm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48643?format=api", "purl": "pkg:deb/debian/jetty9@9.4.39-3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.39-3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/48565?format=api", "purl": "pkg:deb/debian/jetty9@9.4.50-4%2Bdeb11u2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.50-4%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1079963?format=api", "purl": "pkg:deb/debian/jetty9@9.4.50-4%2Bdeb11u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7mms-qgns-uqhx" }, { "vulnerability": "VCID-h7p9-tevk-akdm" }, { "vulnerability": "VCID-khwg-3pxs-gqb2" }, { "vulnerability": "VCID-p6uf-u391-zbhy" }, { "vulnerability": "VCID-qvg8-swau-4ugr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.50-4%252Bdeb11u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/48559?format=api", "purl": "pkg:deb/debian/jetty9@9.4.57-1.1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.57-1.1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/48570?format=api", "purl": "pkg:deb/debian/jetty9@9.4.57-1.1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.57-1.1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/48567?format=api", "purl": "pkg:deb/debian/jetty9@9.4.58-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.58-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/509691?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.43.v20210629", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.43.v20210629" }, { "url": "http://public2.vulnerablecode.io/api/packages/383194?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/383195?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.6" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1076554?format=api", "purl": "pkg:deb/debian/jetty9@9.2.21-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1p7d-8u7b-zqh4" }, { "vulnerability": "VCID-1weg-s38v-nkh9" }, { "vulnerability": "VCID-2d86-b84h-wqcp" }, { "vulnerability": "VCID-2u3a-qmcg-t3gc" }, { "vulnerability": "VCID-3pm8-d3h1-cqhw" }, { "vulnerability": "VCID-55h9-6tun-pkc4" }, { "vulnerability": "VCID-56aa-nb8x-7kb3" }, { "vulnerability": "VCID-763s-d5df-2beb" }, { "vulnerability": "VCID-7mms-qgns-uqhx" }, { "vulnerability": "VCID-7xr6-nemg-gybk" }, { "vulnerability": "VCID-86tn-j81c-63ab" }, { "vulnerability": "VCID-8xbc-mfyr-1fa6" }, { "vulnerability": "VCID-ax1z-sysw-b7fe" }, { "vulnerability": "VCID-cgz7-h6yh-ffgu" }, { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-esg7-1yjr-mydj" }, { "vulnerability": "VCID-gxh7-gu8k-q3bp" }, { "vulnerability": "VCID-h7p9-tevk-akdm" }, { "vulnerability": "VCID-jjm6-tcp1-cfhv" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-k64x-zshk-bqf4" }, { "vulnerability": "VCID-khwg-3pxs-gqb2" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-nw62-p5q9-dye5" }, { "vulnerability": "VCID-p6uf-u391-zbhy" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-qvg8-swau-4ugr" }, { "vulnerability": "VCID-r4wx-79uh-h7cw" }, { "vulnerability": "VCID-rjf3-qq8c-kkdv" }, { "vulnerability": "VCID-xzg5-stwa-1yb2" }, { "vulnerability": "VCID-yd97-jvbz-nug4" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" }, { "vulnerability": "VCID-zua1-xn3d-vkhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.2.21-1~bpo8%252B1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1076555?format=api", "purl": "pkg:deb/debian/jetty9@9.2.21-1%2Bdeb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1p7d-8u7b-zqh4" }, { "vulnerability": "VCID-1weg-s38v-nkh9" }, { "vulnerability": "VCID-2d86-b84h-wqcp" }, { "vulnerability": "VCID-2u3a-qmcg-t3gc" }, { "vulnerability": "VCID-3pm8-d3h1-cqhw" }, { "vulnerability": "VCID-55h9-6tun-pkc4" }, { "vulnerability": "VCID-56aa-nb8x-7kb3" }, { "vulnerability": "VCID-763s-d5df-2beb" }, { "vulnerability": "VCID-7mms-qgns-uqhx" }, { "vulnerability": "VCID-7xr6-nemg-gybk" }, { "vulnerability": "VCID-86tn-j81c-63ab" }, { "vulnerability": "VCID-8xbc-mfyr-1fa6" }, { "vulnerability": "VCID-ax1z-sysw-b7fe" }, { "vulnerability": "VCID-cgz7-h6yh-ffgu" }, { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-esg7-1yjr-mydj" }, { "vulnerability": "VCID-gxh7-gu8k-q3bp" }, { "vulnerability": "VCID-h7p9-tevk-akdm" }, { "vulnerability": "VCID-jjm6-tcp1-cfhv" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-k64x-zshk-bqf4" }, { "vulnerability": "VCID-khwg-3pxs-gqb2" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-nw62-p5q9-dye5" }, { "vulnerability": "VCID-p6uf-u391-zbhy" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-qvg8-swau-4ugr" }, { "vulnerability": "VCID-r4wx-79uh-h7cw" }, { "vulnerability": "VCID-rjf3-qq8c-kkdv" }, { "vulnerability": "VCID-xzg5-stwa-1yb2" }, { "vulnerability": "VCID-yd97-jvbz-nug4" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" }, { "vulnerability": "VCID-zua1-xn3d-vkhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.2.21-1%252Bdeb9u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1078409?format=api", "purl": "pkg:deb/debian/jetty9@9.2.23-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1p7d-8u7b-zqh4" }, { "vulnerability": "VCID-1weg-s38v-nkh9" }, { "vulnerability": "VCID-2d86-b84h-wqcp" }, { "vulnerability": "VCID-2u3a-qmcg-t3gc" }, { "vulnerability": "VCID-3pm8-d3h1-cqhw" }, { "vulnerability": "VCID-55h9-6tun-pkc4" }, { "vulnerability": "VCID-56aa-nb8x-7kb3" }, { "vulnerability": "VCID-763s-d5df-2beb" }, { "vulnerability": "VCID-7mms-qgns-uqhx" }, { "vulnerability": "VCID-7xr6-nemg-gybk" }, { "vulnerability": "VCID-86tn-j81c-63ab" }, { "vulnerability": "VCID-8xbc-mfyr-1fa6" }, { "vulnerability": "VCID-ax1z-sysw-b7fe" }, { "vulnerability": "VCID-cgz7-h6yh-ffgu" }, { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-esg7-1yjr-mydj" }, { "vulnerability": "VCID-gxh7-gu8k-q3bp" }, { "vulnerability": "VCID-h7p9-tevk-akdm" }, { "vulnerability": "VCID-jjm6-tcp1-cfhv" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-khwg-3pxs-gqb2" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-nw62-p5q9-dye5" }, { "vulnerability": "VCID-p6uf-u391-zbhy" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-qvg8-swau-4ugr" }, { "vulnerability": "VCID-r4wx-79uh-h7cw" }, { "vulnerability": "VCID-rjf3-qq8c-kkdv" }, { "vulnerability": "VCID-xzg5-stwa-1yb2" }, { "vulnerability": "VCID-yd97-jvbz-nug4" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" }, { "vulnerability": "VCID-zua1-xn3d-vkhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.2.23-1~bpo8%252B1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1078410?format=api", "purl": "pkg:deb/debian/jetty9@9.4.16-0%2Bdeb10u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1p7d-8u7b-zqh4" }, { "vulnerability": "VCID-1weg-s38v-nkh9" }, { "vulnerability": "VCID-2d86-b84h-wqcp" }, { "vulnerability": "VCID-2u3a-qmcg-t3gc" }, { "vulnerability": "VCID-3pm8-d3h1-cqhw" }, { "vulnerability": "VCID-55h9-6tun-pkc4" }, { "vulnerability": "VCID-56aa-nb8x-7kb3" }, { "vulnerability": "VCID-7mms-qgns-uqhx" }, { "vulnerability": "VCID-86tn-j81c-63ab" }, { "vulnerability": "VCID-8xbc-mfyr-1fa6" }, { "vulnerability": "VCID-ax1z-sysw-b7fe" }, { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-esg7-1yjr-mydj" }, { "vulnerability": "VCID-gxh7-gu8k-q3bp" }, { "vulnerability": "VCID-h7p9-tevk-akdm" }, { "vulnerability": "VCID-jjm6-tcp1-cfhv" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-khwg-3pxs-gqb2" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-nw62-p5q9-dye5" }, { "vulnerability": "VCID-p6uf-u391-zbhy" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-qvg8-swau-4ugr" }, { "vulnerability": "VCID-r4wx-79uh-h7cw" }, { "vulnerability": "VCID-rjf3-qq8c-kkdv" }, { "vulnerability": "VCID-yd97-jvbz-nug4" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" }, { "vulnerability": "VCID-zua1-xn3d-vkhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.16-0%252Bdeb10u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/391334?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.37", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-nw62-p5q9-dye5" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/492621?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.37.v20210219", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jjm6-tcp1-cfhv" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-nw62-p5q9-dye5" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.37.v20210219" }, { "url": "http://public2.vulnerablecode.io/api/packages/492622?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.38.v20210224", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jjm6-tcp1-cfhv" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.38.v20210224" }, { "url": "http://public2.vulnerablecode.io/api/packages/492624?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.39.v20210325", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.39.v20210325" }, { "url": "http://public2.vulnerablecode.io/api/packages/509688?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.40.v20210413", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.40.v20210413" }, { "url": "http://public2.vulnerablecode.io/api/packages/509689?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.41.v20210516", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.41.v20210516" }, { "url": "http://public2.vulnerablecode.io/api/packages/509690?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.42.v20210604", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.42.v20210604" }, { "url": "http://public2.vulnerablecode.io/api/packages/391335?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jjm6-tcp1-cfhv" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/492625?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/509692?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/509693?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/509694?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/391336?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jjm6-tcp1-cfhv" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/492626?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/509695?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/509696?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/509697?format=api", "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbg4-v6wv-6kd3" }, { "vulnerability": "VCID-jpta-ajvd-9ufz" }, { "vulnerability": "VCID-na2m-7z95-vbcd" }, { "vulnerability": "VCID-qhq5-21uh-jkfm" }, { "vulnerability": "VCID-yw6u-8w9z-xffh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.5" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-34429.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-34429.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-34429", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.93778", "scoring_system": "epss", "scoring_elements": "0.99865", "published_at": "2026-06-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-34429" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34429", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34429" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/eclipse/jetty.project", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/eclipse/jetty.project" }, { "reference_url": "https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.43.v20210629", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.43.v20210629" }, { "reference_url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-vjv5-gp2w-65vm", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-vjv5-gp2w-65vm" }, { "reference_url": "https://lists.apache.org/thread.html/r029c0c6833c8bb6acb094733fd7b75029d633f47a92f1c9d14391fc0@%3Cnotifications.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r029c0c6833c8bb6acb094733fd7b75029d633f47a92f1c9d14391fc0@%3Cnotifications.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r02f940c27e997a277ff14e79e84551382e1081e8978b417e0c2b0857@%3Ccommits.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r02f940c27e997a277ff14e79e84551382e1081e8978b417e0c2b0857@%3Ccommits.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r0626f279ebf65506110a897e3a57ccd4072803ee5434b2503e070398@%3Ccommits.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r0626f279ebf65506110a897e3a57ccd4072803ee5434b2503e070398@%3Ccommits.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r2a3ea27cca2ac7352d392b023b72e824387bc9ff16ba245ec663bdc6@%3Cissues.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r2a3ea27cca2ac7352d392b023b72e824387bc9ff16ba245ec663bdc6@%3Cissues.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r2e32390cb7aedb39069e5b18aa130ca53e766258518faee63c31d3ea@%3Cnotifications.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r2e32390cb7aedb39069e5b18aa130ca53e766258518faee63c31d3ea@%3Cnotifications.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r3aefe613abce594c71ace50088d2529bbde65d08b8e7ff2c2723aaa1@%3Cdev.santuario.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r3aefe613abce594c71ace50088d2529bbde65d08b8e7ff2c2723aaa1@%3Cdev.santuario.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r3c55b0baa4dc38958ae147b2f216e212605f1071297f845e14477d36@%3Cissues.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r3c55b0baa4dc38958ae147b2f216e212605f1071297f845e14477d36@%3Cissues.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r44ea39ca8110de7353bfec88f58aa3aa58a42bb324b8772512ee190c@%3Ccommits.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r44ea39ca8110de7353bfec88f58aa3aa58a42bb324b8772512ee190c@%3Ccommits.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r46900f74dbb7d168aeac43bf0e7f64825376bb7eb74d31a5b33344ce@%3Cjira.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r46900f74dbb7d168aeac43bf0e7f64825376bb7eb74d31a5b33344ce@%3Cjira.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r46f748c1dc9cf9b6c1c18f6b5bfc3a869907f68f72e17666f2f30f24@%3Cnotifications.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r46f748c1dc9cf9b6c1c18f6b5bfc3a869907f68f72e17666f2f30f24@%3Cnotifications.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r4727d282b5c2d951057845a46065d59f6e33132edc0a14f41c26b01e@%3Cdev.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r4727d282b5c2d951057845a46065d59f6e33132edc0a14f41c26b01e@%3Cdev.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r48a93f2bc025acd7c7e341ed3864bfdeb75f0c768d41bc247e1a1f63@%3Cnotifications.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r48a93f2bc025acd7c7e341ed3864bfdeb75f0c768d41bc247e1a1f63@%3Cnotifications.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r5678d994d4dd8e7c838eed3bbc1a83a7f6bc62724b0cce67e8892a45@%3Cnotifications.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r5678d994d4dd8e7c838eed3bbc1a83a7f6bc62724b0cce67e8892a45@%3Cnotifications.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r679d96f981d4c92724090ed2d5e8565a1d655a72bb315550489f052e@%3Cjira.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r679d96f981d4c92724090ed2d5e8565a1d655a72bb315550489f052e@%3Cjira.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r6e6f50c1ce1fb592cb43e913f5be23df104d50751465f8f1952ace0c@%3Cjira.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r6e6f50c1ce1fb592cb43e913f5be23df104d50751465f8f1952ace0c@%3Cjira.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r721ab6a5fa8d45bec76714b674f5d4caed2ebfeca69ad1d6d4caae6c@%3Cdev.hbase.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r721ab6a5fa8d45bec76714b674f5d4caed2ebfeca69ad1d6d4caae6c@%3Cdev.hbase.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r74fdc446df551fe89a0a16957a1bfdaad19380e0c1afd30625685a9c@%3Cjira.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r74fdc446df551fe89a0a16957a1bfdaad19380e0c1afd30625685a9c@%3Cjira.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r756443e9d50af7e8c3df82e2c45105f452c8e8195ddbc0c00f58d5fe@%3Ccommits.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r756443e9d50af7e8c3df82e2c45105f452c8e8195ddbc0c00f58d5fe@%3Ccommits.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r763840320a80e515331cbc1e613fa93f25faf62e991974171a325c82@%3Cdev.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r763840320a80e515331cbc1e613fa93f25faf62e991974171a325c82@%3Cdev.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r7dd079fa0ac6f47ba1ad0af98d7d0276547b8a4e005f034fb1016951@%3Cissues.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r7dd079fa0ac6f47ba1ad0af98d7d0276547b8a4e005f034fb1016951@%3Cissues.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r833a4c8bdbbfeb8a2cd38238e7b59f83edd5c1a0e508b587fc551a46@%3Cissues.hbase.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r833a4c8bdbbfeb8a2cd38238e7b59f83edd5c1a0e508b587fc551a46@%3Cissues.hbase.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r8e6c116628c1277c3cf132012a66c46a0863fa2a3037c0707d4640d4@%3Cissues.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r8e6c116628c1277c3cf132012a66c46a0863fa2a3037c0707d4640d4@%3Cissues.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r90e7b4c42a96d74c219e448bee6a329ab0cd3205c44b63471d96c3ab@%3Cissues.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r90e7b4c42a96d74c219e448bee6a329ab0cd3205c44b63471d96c3ab@%3Cissues.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r9d245c6c884bbc804a472116d730c1a01676bf24f93206a34923fc64@%3Ccommits.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r9d245c6c884bbc804a472116d730c1a01676bf24f93206a34923fc64@%3Ccommits.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r9e6158d72ef25077c2dc59fbddade2eacf7d259a2556c97a989f2fe8@%3Ccommits.pulsar.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r9e6158d72ef25077c2dc59fbddade2eacf7d259a2556c97a989f2fe8@%3Ccommits.pulsar.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rb33d65c3e5686f2e3b9bb8a032a44163b2f2ad9d31a8727338f213c1@%3Ccommits.pulsar.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rb33d65c3e5686f2e3b9bb8a032a44163b2f2ad9d31a8727338f213c1@%3Ccommits.pulsar.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rc26807be68748b3347decdcd03ae183622244b0b4cb09223d4b7e500@%3Ccommits.pulsar.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rc26807be68748b3347decdcd03ae183622244b0b4cb09223d4b7e500@%3Ccommits.pulsar.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rcb157f55b9ae41b3076801de927c6fca1669c6d8eaf11a9df5dbeb46@%3Cnotifications.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rcb157f55b9ae41b3076801de927c6fca1669c6d8eaf11a9df5dbeb46@%3Cnotifications.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rcea249eb7a0d243f21696e4985de33f3780399bf7b31ea1f6d489b8b@%3Cissues.zookeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rcea249eb7a0d243f21696e4985de33f3780399bf7b31ea1f6d489b8b@%3Cissues.zookeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/re01890eef49d4201018f2c97e26536e3e75f441ecdbcf91986c3bc17@%3Cjira.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/re01890eef49d4201018f2c97e26536e3e75f441ecdbcf91986c3bc17@%3Cjira.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/re3de01414ccf682fe0951205f806dd8e94440798fd64c55a4941de3e@%3Cjira.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/re3de01414ccf682fe0951205f806dd8e94440798fd64c55a4941de3e@%3Cjira.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/re5e9bb535db779506013ef8799dc2a299e77cdad6668aa94c456dba6@%3Cjira.kafka.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/re5e9bb535db779506013ef8799dc2a299e77cdad6668aa94c456dba6@%3Cjira.kafka.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/re850203ef8700cb826534dd4a1cb9f5b07bb8f6f973b39ff7838d3ba@%3Cissues.hbase.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/re850203ef8700cb826534dd4a1cb9f5b07bb8f6f973b39ff7838d3ba@%3Cissues.hbase.apache.org%3E" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34429", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34429" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210819-0006", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20210819-0006" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210819-0006/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.netapp.com/advisory/ntap-20210819-0006/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1985223", "reference_id": "1985223", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1985223" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991188", "reference_id": "991188", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991188" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/webapps/50478.txt", "reference_id": "CVE-2021-34429", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/webapps/50478.txt" }, { "reference_url": "https://github.com/advisories/GHSA-vjv5-gp2w-65vm", "reference_id": "GHSA-vjv5-gp2w-65vm", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vjv5-gp2w-65vm" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3700", "reference_id": "RHSA-2021:3700", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3700" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:0138", "reference_id": "RHSA-2022:0138", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:0138" } ], "weaknesses": [ { "cwe_id": 200, "name": "Exposure of Sensitive Information to an Unauthorized Actor", "description": "The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information." }, { "cwe_id": 551, "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization", "description": "If a web server does not fully parse requested URLs before it examines them for authorization, it may be possible for an attacker to bypass authorization protection." }, { "cwe_id": 863, "name": "Incorrect Authorization", "description": "The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [ { "date_added": null, "description": "Jetty suffers from a vulnerability where certain encoded URIs and ambiguous paths can access\n protected files in the WEB-INF folder. Versions effected are:\n 9.4.37.v20210219, 9.4.38.v20210224 and 9.4.37-9.4.42, 10.0.1-10.0.5, 11.0.1-11.0.5.\n Exploitation can obtain any file in the WEB-INF folder, but web.xml is most likely\n to have information of value.", "required_action": null, "due_date": null, "notes": "Stability:\n - crash-safe\nReliability: []\nSideEffects:\n - ioc-in-logs\n", "known_ransomware_campaign_use": false, "source_date_published": "2021-07-15", "exploit_type": null, "platform": "", "source_date_updated": null, "data_source": "Metasploit", "source_url": "https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/gather/jetty_web_inf_disclosure.rb" }, { "date_added": "2021-11-03", "description": "Eclipse Jetty 11.0.5 - Sensitive File Disclosure", "required_action": null, "due_date": null, "notes": null, "known_ransomware_campaign_use": false, "source_date_published": "2021-11-03", "exploit_type": "webapps", "platform": "java", "source_date_updated": "2021-11-03", "data_source": "Exploit-DB", "source_url": "" } ], "severity_range_score": "4.0 - 6.9", "exploitability": "2.0", "weighted_severity": "6.2", "risk_score": 10.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qhq5-21uh-jkfm" }