Search for packages
| purl | pkg:maven/org.eclipse.jetty/jetty-http@9.3.0.M0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2017-7658
|
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2015-2080
|
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2017-7657
|
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2017-7656
|
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-cj7v-27pg-wf7q
Aliases: CVE-2022-2047 |
Jetty invalid URI parsing may produce invalid HttpURI.authority ### Description URI use within Jetty's `HttpURI` class can parse invalid URIs … | There are no reported fixed by versions. |
|
CVE-2019-10247
|
Information Exposure In Eclipse Jetty version, the server running on any OS and Jetty version combination will reveal the configured … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2015-2080
|
Remote Leakage Of Shared Buffers In Jetty Web Server The exception handling code in this package allows remote attackers to … |
Vulnerable |
|
CVE-2019-10241
|
Cross-site Scripting Jetty server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2022-2047
Aliases: GHSA-cj7v-27pg-wf7q |
Improper Input Validation In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-28165
Aliases: GHSA-26vr-8j45-3r4w |
Uncontrolled Resource Consumption In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-27216
|
Creation of Temporary File in Directory with Insecure Permissions In Eclipse Jetty on Unix like systems, the system's temporary directory … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-qh8g-58pp-2wxh
Aliases: CVE-2024-6763 |
Eclipse Jetty URI parsing of invalid authority ## Summary Eclipse Jetty is a lightweight, highly scalable, Java-based web server and … |
Vulnerable Vulnerable |
|
GHSA-hmr7-m48g-48f6
Aliases: CVE-2023-40167 |
Jetty accepts "+" prefixed value in Content-Length ### Impact Jetty accepts the '+' character proceeding the content-length value in a … |
Vulnerable Vulnerable |