jetty12 vulnerabilities (Debian)
22 vulnerabilities.
-
jetty12Debian When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may... 8.2 High -
jetty12Debian In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ```... 8.2 High -
jetty12Debian In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to... 6.9 Medium -
jetty12Debian TuxCare security update for 123 packages (8 CVEs) 5.6 Medium -
jetty12Debian TuxCare security update for 123 packages (8 CVEs) 6.9 Medium -
jetty12Debian In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`,... 8.8 High -
jetty12Debian Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames 8.8 High -
jetty12Debian Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring 6.9 Medium -
jetty12Debian A client may send a WebSocket frame with an unknown opcode and a very large declared payload... 8.7 High -
jetty12Debian A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty... 8.3 High -
jetty12Debian A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are... 8.7 High -
jetty12Debian Digest authentication lossy encoding 8.7 High -
jetty12Debian Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests 7.5 High -
jetty12Debian Eclipse Jetty: Path parameter traversal 5.3 Medium -
jetty12Debian Eclipse Jetty: HTTP Authority/Host mismatch 5.3 Medium -
jetty12Debian Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections 6.9 Medium -
jetty12Debian HTTP Request Smuggling via Chunked Extension Quoted-String Parsing 7.4 High -
jetty12Debian Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables 7.4 High -
jetty12Debian The Eclipse Jetty Server Artifact has a Gzip request memory leak 7.5 High -
jetty12Debian Eclipse Jetty HTTP clients can increase memory allocation 7.5 High -
jetty12Debian MadeYouReset HTTP/2 vulnerability 7.7 High -
jetty12Debian Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 3.7 Low