Search for packages
| purl | pkg:maven/org.eclipse.jetty/jetty-server@9.2.0 |
| Tags | Ghost |
| Next non-vulnerable version | 9.4.57.v20241219 |
| Latest non-vulnerable version | 12.1.6 |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6uhn-tn81-cyac
Aliases: CVE-2019-10246 GHSA-r28m-g6j9-r2h5 |
Information Exposure In Eclipse Jetty version, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories. |
Affected by 7 other vulnerabilities. Affected by 6 other vulnerabilities. Affected by 9 other vulnerabilities. |
|
VCID-ahev-zdjd-gqg1
Aliases: CVE-2019-10241 GHSA-7vx9-xjhr-rw6h |
Cross-site Scripting Jetty server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the `DefaultServlet` or `ResourceHandler` that is configured for showing a Listing of directory contents. |
Affected by 10 other vulnerabilities. Affected by 9 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 8 other vulnerabilities. Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T15:57:26.840575+00:00 | GHSA Importer | Affected by | VCID-6uhn-tn81-cyac | https://github.com/advisories/GHSA-r28m-g6j9-r2h5 | 38.0.0 |
| 2026-04-01T12:48:25.798323+00:00 | GitLab Importer | Affected by | VCID-ahev-zdjd-gqg1 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty/jetty-server/CVE-2019-10241.yml | 38.0.0 |