Search for packages
| purl | pkg:maven/org.eclipse.jetty/jetty-http@8.1.3.v20120416 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2017-7658
|
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-cj7v-27pg-wf7q
Aliases: CVE-2022-2047 |
Jetty invalid URI parsing may produce invalid HttpURI.authority ### Description URI use within Jetty's `HttpURI` class can parse invalid URIs … | There are no reported fixed by versions. |
|
CVE-2019-10247
|
Information Exposure In Eclipse Jetty version, the server running on any OS and Jetty version combination will reveal the configured … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2022-2047
Aliases: GHSA-cj7v-27pg-wf7q |
Improper Input Validation In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-28165
Aliases: GHSA-26vr-8j45-3r4w |
Uncontrolled Resource Consumption In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-27216
|
Creation of Temporary File in Directory with Insecure Permissions In Eclipse Jetty on Unix like systems, the system's temporary directory … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-qh8g-58pp-2wxh
Aliases: CVE-2024-6763 |
Eclipse Jetty URI parsing of invalid authority ## Summary Eclipse Jetty is a lightweight, highly scalable, Java-based web server and … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2015-2080
|
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via … |