Search for packages
| purl | pkg:deb/debian/jetty9@9.4.18-2?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-ahev-zdjd-gqg1 | Cross-site Scripting Jetty server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the `DefaultServlet` or `ResourceHandler` that is configured for showing a Listing of directory contents. |
CVE-2019-10241
GHSA-7vx9-xjhr-rw6h |
| VCID-czhb-gqt2-17av | Information Exposure In Eclipse Jetty, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a `DefaultHandler`, which is responsible for reporting this error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context. |
CVE-2019-10247
GHSA-xc67-hjx6-cgg6 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T13:25:27.627974+00:00 | Debian Importer | Fixing | VCID-czhb-gqt2-17av | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T13:15:46.215256+00:00 | Debian Importer | Fixing | VCID-ahev-zdjd-gqg1 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T09:15:36.254887+00:00 | Debian Importer | Fixing | VCID-czhb-gqt2-17av | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-13T09:08:00.191394+00:00 | Debian Importer | Fixing | VCID-ahev-zdjd-gqg1 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:27:50.028014+00:00 | Debian Importer | Fixing | VCID-czhb-gqt2-17av | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:27:49.939656+00:00 | Debian Importer | Fixing | VCID-ahev-zdjd-gqg1 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |