Login Request a demo
JE
Product
jetty.project
by eclipse · last CVE Oct 10, 2023
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 1
Severity
All severities6Critical0High1Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add jetty.project to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-36478
7.5
5%
Oct 10
HTTP/2 HPACK integer overflow and buffer allocation
Affected: >= 10.0.0, < 10.0.16; >= 11.0.0, < 11.0.16; >= 9.3.0, < 9.4.53
CVE-2023-40167
5.3
1%
Sep 15
Jetty accepts "+" prefixed value in Content-Length
Affected: >= 9.0.0, <= 9.4.51; >= 10.0.0, <= 10.0.15; >= 11.0.0, <= 11.0.15; = 12.0.0
CVE-2023-26049
5.3
1%
Apr 18
Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty
Affected: < 9.4.51; >= 10.0.0, < 10.0.14; >= 11.0.0, < 11.0.14; >= 12.0.0.alpha0, < 12.0.0.beta0
CVE-2023-26048
5.3
3%
Apr 18
OutOfMemoryError for large multipart without filename in Eclipse Jetty
Affected: < 9.4.51; >= 10.0.0, < 10.0.14; >= 11.0.0, < 11.0.14
CVE-2023-41900
4.3
1%
Sep 15
Jetty's OpenId Revoked authentication allows one request
Affected: >= 9.4.21, <= 9.4.51; >= 10.0.0, <= 10.0.15; >= 11.0.0, <= 11.0.15
CVE-2023-36479
3.1
1%
Sep 15
Jetty vulnerable to errant command quoting in CGI Servlet
Affected: >= 9.0.0, <= 9.4.51; >= 10.0.0, <= 10.0.15; >= 11.0.0, <= 11.0.15; <= 12.0.0-beta1
Showing 6