Search for packages
| purl | pkg:maven/org.eclipse.jetty/jetty-server@9.3.0.M0 |
| Next non-vulnerable version | 10.0.0.beta3 |
| Latest non-vulnerable version | 12.1.10 |
| Risk score | 3.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2017-7658
|
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2016-4800
|
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2019-10247
|
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on … |
Vulnerable |
|
CVE-2017-7656
|
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-26vr-8j45-3r4w
Aliases: CVE-2021-28165 |
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources ### Impact When using SSL/TLS with Jetty, … | There are no reported fixed by versions. |
|
GHSA-p26g-97m4-6q7c
Aliases: CVE-2023-26049 |
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies Nonstandard cookie parsing in Jetty may allow … |
Vulnerable |
|
GHSA-qw69-rqj8-6qw8
Aliases: CVE-2023-26048 |
OutOfMemoryError for large multipart without filename in Eclipse Jetty ### Impact Servlets with multipart support (e.g. annotated with `@MultipartConfig`) that … |
Vulnerable |
|
CVE-2019-10247
|
Information Exposure In Eclipse Jetty, the server running on any OS and Jetty version combination will reveal the configured fully … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-34428
Aliases: GHSA-m6cp-vxjx-65j6 |
Insufficient Session Expiration If an exception is thrown from the `SessionListener#sessionDestroyed()` method, then the session ID is not invalidated in … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2023-26049
Aliases: GHSA-p26g-97m4-6q7c |
Exposure of Sensitive Information to an Unauthorized Actor Jetty is a java based web server and servlet engine. Nonstandard cookie … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2023-40167
Aliases: GHSA-hmr7-m48g-48f6 |
Improper Handling of Length Parameter Inconsistency Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2021-28165
Aliases: GHSA-26vr-8j45-3r4w |
Uncontrolled Resource Consumption In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-27216
|
Creation of Temporary File in Directory with Insecure Permissions In Eclipse Jetty on Unix like systems, the system's temporary directory … |
Vulnerable Not vulnerable Not vulnerable |
|
GHSA-9rgv-h7x4-qw8g
Aliases: CVE-2018-12536 |
Eclipse Jetty Server generates error message containing sensitive information In Eclipse Jetty Server, all 9.x versions, on webapps deployed using … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-84q7-p226-4x5w
Aliases: CVE-2017-7656 |
Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling) Eclipse Jetty, versions 9.2.x and older, … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-m6cp-vxjx-65j6
Aliases: CVE-2021-34428 |
SessionListener can prevent a session from being invalidated breaking logout ### Impact If an exception is thrown from the `SessionListener#sessionDestroyed()` … |
Vulnerable Vulnerable |