org.eclipse.jetty.demos:demo-jetty-webapp vulnerabilities (TuxCare)
13 vulnerabilities.
org.eclipse.jetty.demos:demo-jetty-webappTuxCareTuxCare security update for 123 packages (1 CVE)No scoreorg.eclipse.jetty.demos:demo-jetty-webappTuxCareWhen Jetty's `HttpClient` make a request to a server through a forward proxy, the server may...8.2 Highorg.eclipse.jetty.demos:demo-jetty-webappTuxCareIn Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ```...8.2 Highorg.eclipse.jetty.demos:demo-jetty-webappTuxCareIn Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to...6.9 Mediumorg.eclipse.jetty.demos:demo-jetty-webappTuxCareTuxCare security update for 123 packages (8 CVEs)5.6 Mediumorg.eclipse.jetty.demos:demo-jetty-webappTuxCareTuxCare security update for 123 packages (8 CVEs)6.9 Mediumorg.eclipse.jetty.demos:demo-jetty-webappTuxCareIn Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`,...8.8 Highorg.eclipse.jetty.demos:demo-jetty-webappTuxCareJetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames8.8 Highorg.eclipse.jetty.demos:demo-jetty-webappTuxCareUnauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring6.9 Mediumorg.eclipse.jetty.demos:demo-jetty-webappTuxCareA client may send a WebSocket frame with an unknown opcode and a very large declared payload...8.7 Highorg.eclipse.jetty.demos:demo-jetty-webappTuxCareA client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty...8.3 Highorg.eclipse.jetty.demos:demo-jetty-webappTuxCareA client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are...8.7 Highorg.eclipse.jetty.demos:demo-jetty-webappTuxCareDigest authentication lossy encoding8.7 High