org.eclipse.jetty:jetty-server vulnerabilities (Maven)

29 vulnerabilities.

• org.eclipse.jetty:jetty-server Maven Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests CVE-2024-7708 Fix available 7.5 HighJuly 14, 2026
• org.eclipse.jetty:jetty-server Maven Eclipse Jetty: HTTP Authority/Host mismatch CVE-2026-6790 Fix available 5.3 MediumJuly 14, 2026
• org.eclipse.jetty:jetty-server Maven Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections CVE-2026-10051 Fix available 6.9 MediumJuly 14, 2026
• org.eclipse.jetty:jetty-server Maven The Eclipse Jetty Server Artifact has a Gzip request memory leak CVE-2026-1605 Fix available 7.5 HighMarch 5, 2026
• org.eclipse.jetty:jetty-server Maven Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks CVE-2024-8184 Fix available 5.9 MediumJuly 10, 2023
• org.eclipse.jetty:jetty-server Maven Eclipse Jetty GZIP buffer release CVE-2024-13009 Fix available 7.2 HighJuly 10, 2023
• org.eclipse.jetty:jetty-server Maven Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty CVE-2023-26049 Public exploitFix available 2.4 LowApril 18, 2023
• org.eclipse.jetty:jetty-server Maven OutOfMemoryError for large multipart without filename in Eclipse Jetty CVE-2023-26048 Public exploitFix available 5.3 MediumApril 18, 2023
• org.eclipse.jetty:jetty-server Maven Jetty SslConnection does not release pooled ByteBuffers in case of errors CVE-2022-2191 Fix available 7.5 HighJuly 7, 2022
• org.eclipse.jetty:jetty-server Maven SessionListener can prevent a session from being invalidated breaking logout CVE-2021-34428 Public exploitFix available 2.9 LowJune 22, 2021
• org.eclipse.jetty:jetty-server Maven Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources CVE-2021-28165 Public exploitFix available EPSS 53.9% 7.5 HighApril 1, 2021
• org.eclipse.jetty:jetty-server Maven DOS vulnerability for Quoted Quality CSV headers CVE-2020-27223 Public exploitFix available EPSS 78.0% 5.2 MediumFebruary 26, 2021
• org.eclipse.jetty:jetty-server Maven Buffer not correctly recycled in Gzip Request inflation CVE-2020-27218 Fix available 4.8 MediumNovember 28, 2020
• org.eclipse.jetty:jetty-server Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2019-17638 Public exploitFix available EPSS 11.1% 9.4 CriticalJuly 9, 2020
• org.eclipse.jetty:jetty-server Maven Unescaped exception messages in error responses in Jetty CVE-2019-17632 Fix available 6.1 MediumNovember 25, 2019
• org.eclipse.jetty:jetty-server Maven Installation information leak in Eclipse Jetty CVE-2019-10247 Fix available 5.3 MediumApril 22, 2019
• org.eclipse.jetty:jetty-server Maven Information Exposure vulnerability in Eclipse Jetty CVE-2019-10246 Fix available 5.3 MediumApril 22, 2019
• org.eclipse.jetty:jetty-server Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2019-10241 Fix available 6.1 MediumApril 22, 2019
• org.eclipse.jetty:jetty-server Maven Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server CVE-2018-12545 Fix available 7.5 HighMarch 27, 2019
• org.eclipse.jetty:jetty-server Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2018-12536 Fix available 5.3 MediumJune 27, 2018
• org.eclipse.jetty:jetty-server Maven Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) CVE-2017-7658 Fix available EPSS 19.0% 9.8 CriticalJune 26, 2018
• org.eclipse.jetty:jetty-server Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-7657 Fix available EPSS 14.4% 9.8 CriticalJune 26, 2018
• org.eclipse.jetty:jetty-server Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-7656 Fix available 7.5 HighJune 26, 2018
• org.eclipse.jetty:jetty-server Maven Access and integrity issue within Eclipse Jetty CVE-2018-12538 Fix available 8.8 HighJune 22, 2018
• org.eclipse.jetty:jetty-server Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-9735 Fix available 7.5 HighJune 16, 2017
• org.eclipse.jetty:jetty-server Maven Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request CVE-2016-4800 Fix available 9.8 CriticalApril 13, 2017
• org.eclipse.jetty:jetty-server Maven Jetty vulnerable to exposure of sensitive information to unauthenticated remote users CVE-2015-2080 Public exploitFix available EPSS 75.4% 7.5 HighOctober 7, 2016
• org.eclipse.jetty:jetty-server Maven Improper Input Validation in Jetty CVE-2011-4461 Fix available 5.3 MediumDecember 29, 2011
• org.eclipse.jetty:jetty-server Maven Jetty Uses Predictable Session Identifiers CVE-2006-6969 Fix available 6.8 MediumFebruary 7, 2007