org.eclipse.jetty.demos:demo-web-fragment vulnerabilities (TuxCare)
13 vulnerabilities.
org.eclipse.jetty.demos:demo-web-fragmentTuxCareTuxCare security update for 123 packages (1 CVE)No scoreorg.eclipse.jetty.demos:demo-web-fragmentTuxCareWhen Jetty's `HttpClient` make a request to a server through a forward proxy, the server may...8.2 Highorg.eclipse.jetty.demos:demo-web-fragmentTuxCareIn Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ```...8.2 Highorg.eclipse.jetty.demos:demo-web-fragmentTuxCareIn Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to...6.9 Mediumorg.eclipse.jetty.demos:demo-web-fragmentTuxCareTuxCare security update for 123 packages (8 CVEs)5.6 Mediumorg.eclipse.jetty.demos:demo-web-fragmentTuxCareTuxCare security update for 123 packages (8 CVEs)6.9 Mediumorg.eclipse.jetty.demos:demo-web-fragmentTuxCareIn Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`,...8.8 Highorg.eclipse.jetty.demos:demo-web-fragmentTuxCareJetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames8.8 Highorg.eclipse.jetty.demos:demo-web-fragmentTuxCareUnauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring6.9 Mediumorg.eclipse.jetty.demos:demo-web-fragmentTuxCareA client may send a WebSocket frame with an unknown opcode and a very large declared payload...8.7 Highorg.eclipse.jetty.demos:demo-web-fragmentTuxCareA client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty...8.3 Highorg.eclipse.jetty.demos:demo-web-fragmentTuxCareA client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are...8.7 Highorg.eclipse.jetty.demos:demo-web-fragmentTuxCareDigest authentication lossy encoding8.7 High