Search for packages
| purl | pkg:maven/org.eclipse.jetty/jetty-runner@9.3.11.v20160721 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-12536
|
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives … | There are no reported fixed by versions. |
|
CVE-2017-9735
|
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain … |
Vulnerable |
|
CVE-2019-10241
|
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS … | There are no reported fixed by versions. |
|
CVE-2017-7658
|
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented … | There are no reported fixed by versions. |
|
CVE-2017-7657
|
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks … | There are no reported fixed by versions. |
|
CVE-2017-7656
|
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is … | There are no reported fixed by versions. |
|
CVE-2019-17632
|
In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content (in text/html and text/json … | There are no reported fixed by versions. |
|
CVE-2018-1336
|
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2015-2080
|
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via … | |
|
CVE-2016-4800
|
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass … |