Search for packages
| purl | pkg:maven/org.eclipse.jetty/jetty-util@9.4.8.v20171121 |
| Next non-vulnerable version | 9.4.39.v20210325 |
| Latest non-vulnerable version | 12.1.9 |
| Risk score | 2.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-12536
|
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Not vulnerable |
|
CVE-2020-27223
Aliases: GHSA-m394-8rww-3jr7 |
Uncontrolled Resource Consumption When Jetty handles a request containing multiple `Accept` headers with a large number of `quality` (i.e., `q`) … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-28165
Aliases: GHSA-26vr-8j45-3r4w |
Uncontrolled Resource Consumption In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2020-27216
|
Creation of Temporary File in Directory with Insecure Permissions In Eclipse Jetty on Unix like systems, the system's temporary directory … |
Vulnerable Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2017-9735
|
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain … | |
|
CVE-2015-2080
|
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via … | |
|
CVE-2016-4800
|
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass … |