org.eclipse.jetty:jetty-webapp vulnerabilities (Maven)

3 vulnerabilities.

• org.eclipse.jetty:jetty-webapp Maven Encoded URIs can access WEB-INF directory in Eclipse Jetty CVE-2021-34429 Public exploitFix available EPSS 99.3% 5.3 MediumJuly 15, 2021
• org.eclipse.jetty:jetty-webapp Maven Authorization Before Parsing and Canonicalization in jetty CVE-2021-28164 Public exploitFix available EPSS 82.4% 5.3 MediumApril 1, 2021
• org.eclipse.jetty:jetty-webapp Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2020-27216 Fix available 7.0 HighOctober 23, 2020