Login Request a demo
JE
Product
jetty.project
by eclipse · last CVE Oct 10, 2023
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 1
Severity
All severities6Critical0High1Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add jetty.project to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-40167
5.3
1%
Sep 15
Jetty accepts "+" prefixed value in Content-Length
Affected: >= 9.0.0, <= 9.4.51; >= 10.0.0, <= 10.0.15; >= 11.0.0, <= 11.0.15; = 12.0.0
CVE-2023-26049
5.3
1%
Apr 18
Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty
Affected: < 9.4.51; >= 10.0.0, < 10.0.14; >= 11.0.0, < 11.0.14; >= 12.0.0.alpha0, < 12.0.0.beta0
CVE-2023-26048
5.3
3%
Apr 18
OutOfMemoryError for large multipart without filename in Eclipse Jetty
Affected: < 9.4.51; >= 10.0.0, < 10.0.14; >= 11.0.0, < 11.0.14
CVE-2023-41900
4.3
1%
Sep 15
Jetty's OpenId Revoked authentication allows one request
Affected: >= 9.4.21, <= 9.4.51; >= 10.0.0, <= 10.0.15; >= 11.0.0, <= 11.0.15
Showing 4