rh-eclipse-jetty-http vulnerabilities (Red Hat)

5 vulnerabilities.

• rh-eclipse-jetty-http Red Hat Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources CVE-2021-28165 Public exploitFix available EPSS 53.9% 7.5 HighApril 1, 2021
• rh-eclipse-jetty-http Red Hat Authorization Before Parsing and Canonicalization in jetty CVE-2021-28164 Public exploitFix available EPSS 82.4% 5.3 MediumApril 1, 2021
• rh-eclipse-jetty-http Red Hat Directory exposure in jetty CVE-2021-28163 Fix available 2.7 LowApril 1, 2021
• rh-eclipse-jetty-http Red Hat In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate... CVE-2020-27225 Fix available 7.8 HighMarch 9, 2021
• rh-eclipse-jetty-http Red Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2020-27216 Fix available 7.0 HighOctober 23, 2020