org.eclipse.jetty:jetty-xml vulnerabilities (Maven)

23 vulnerabilities.

• org.eclipse.jetty:jetty-xml Maven MadeYouReset HTTP/2 vulnerability CVE-2025-5115 Fix available 7.7 HighJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2025-11143 Fix available 3.7 LowJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Jetty DOS vulnerability on DosFilter CVE-2024-9823 Fix available 5.3 MediumJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks CVE-2024-8184 Fix available 5.9 MediumJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Jetty PushSessionCacheFilter can cause remote DoS attacks CVE-2024-6762 Fix available 3.1 LowJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Jetty connection leaking on idle timeout when TCP congested CVE-2024-22201 Fix available 7.5 HighJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty GZIP buffer release CVE-2024-13009 Fix available 7.2 HighJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Jetty's OpenId Revoked authentication allows one request CVE-2023-41900 Fix available 3.5 LowJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Jetty accepts "+" prefixed value in Content-Length CVE-2023-40167 Public exploitFix available 5.3 MediumJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Jetty vulnerable to errant command quoting in CGI Servlet CVE-2023-36479 Fix available 3.5 LowJuly 10, 2023
• org.eclipse.jetty:jetty-xml Maven Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty CVE-2023-26049 Public exploitFix available 2.4 LowApril 18, 2023
• org.eclipse.jetty:jetty-xml Maven OutOfMemoryError for large multipart without filename in Eclipse Jetty CVE-2023-26048 Public exploitFix available 5.3 MediumApril 18, 2023
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2022-2048 Fix available 7.5 HighJuly 7, 2022
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2021-28169 Fix available EPSS 78.5% 5.3 MediumJune 9, 2021
• org.eclipse.jetty:jetty-xml Maven Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources CVE-2021-28165 Public exploitFix available EPSS 53.9% 7.5 HighApril 1, 2021
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2020-27216 Fix available 7.0 HighOctober 23, 2020
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2019-17638 Public exploitFix available EPSS 11.1% 9.4 CriticalJuly 9, 2020
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2019-10241 Fix available 6.1 MediumApril 22, 2019
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2018-12536 Fix available 5.3 MediumJune 27, 2018
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-7657 Fix available EPSS 14.4% 9.8 CriticalJune 26, 2018
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-7656 Fix available 7.5 HighJune 26, 2018
• org.eclipse.jetty:jetty-xml Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-9735 Fix available 7.5 HighJune 16, 2017