Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

eclipse jetty 9.3.0 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2016-4800
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x prior to 9.3.9 on Windows allows remote malicious users to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
Eclipse Jetty 9.3.7Eclipse Jetty 9.3.4Eclipse Jetty 9.3.5Eclipse Jetty 9.3.6Eclipse Jetty 9.3.1Eclipse Jetty 9.3.2Eclipse Jetty 9.3.0Eclipse Jetty 9.3.8Eclipse Jetty 9.3.3
7.5
CVSSv3
CVE-2015-2080
The exception handling code in Eclipse Jetty prior to 9.2.9.v20150224 allows remote malicious users to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
Fedoraproject Fedora 22Eclipse Jetty 9.3.0Eclipse Jetty 9.2.3Eclipse Jetty 9.2.8Eclipse Jetty 9.2.5Eclipse Jetty 9.2.4Eclipse Jetty 9.2.7Eclipse Jetty 9.2.6
7.5
CVSSv3
CVE-2018-12545
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory al...
Eclipse Jetty 9.3.0Eclipse Jetty 9.3.4Eclipse Jetty 9.3.7Eclipse Jetty 9.3.8Eclipse Jetty 9.3.1Eclipse Jetty 9.3.2Eclipse Jetty 9.3.3Eclipse Jetty 9.3.5Eclipse Jetty 9.3.6Eclipse Jetty 9.3.9Eclipse Jetty 9.3.10Eclipse Jetty 9.3.11Eclipse Jetty 9.3.12Eclipse Jetty 9.3.13Eclipse Jetty 9.3.14Eclipse Jetty 9.3.15Eclipse Jetty 9.3.16Eclipse Jetty 9.3.17Eclipse Jetty 9.3.18Eclipse Jetty 9.3.19Eclipse Jetty 9.3.20Eclipse Jetty 9.3.21
6.1
CVSSv3
CVE-2019-10241
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory cont...
Eclipse Jetty 9.3.0Eclipse Jetty 9.3.4Eclipse Jetty 9.3.7Eclipse Jetty 9.3.8Eclipse Jetty 9.3.1Eclipse Jetty 9.3.2Eclipse Jetty 9.3.3Eclipse Jetty 9.3.5Eclipse Jetty 9.3.6Eclipse Jetty 9.3.9Eclipse Jetty 9.3.10Eclipse Jetty 9.3.11Eclipse Jetty 9.3.12Eclipse Jetty 9.3.13Eclipse Jetty 9.3.14Eclipse Jetty 9.3.15Eclipse Jetty 9.3.16Eclipse Jetty 9.3.17Eclipse Jetty 9.3.18Eclipse Jetty 9.3.19Eclipse Jetty 9.3.20Eclipse Jetty 9.3.21
5.3
CVSSv3
CVE-2019-10247
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Con...
Eclipse Jetty 9.3.0Eclipse Jetty 9.3.4Eclipse Jetty 9.3.7Eclipse Jetty 9.3.8Eclipse Jetty 9.3.1Eclipse Jetty 9.3.2Eclipse Jetty 9.3.3Eclipse Jetty 9.3.5Eclipse Jetty 9.3.6Eclipse Jetty 9.3.9Eclipse Jetty 9.3.10Eclipse Jetty 9.3.11Eclipse Jetty 9.3.12Eclipse Jetty 9.3.13Eclipse Jetty 9.3.14Eclipse Jetty 9.3.15Eclipse Jetty 9.3.16Eclipse Jetty 9.3.17Eclipse Jetty 9.3.18Eclipse Jetty 9.3.19Eclipse Jetty 9.3.20Eclipse Jetty 9.3.21
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook