org.eclipse.jetty:jetty-jaspi vulnerabilities (TuxCare)
22 vulnerabilities.
org.eclipse.jetty:jetty-jaspiTuxCareTuxCare security update for 123 packages (1 CVE)No scoreorg.eclipse.jetty:jetty-jaspiTuxCareWhen Jetty's `HttpClient` make a request to a server through a forward proxy, the server may...8.2 Highorg.eclipse.jetty:jetty-jaspiTuxCareIn Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ```...8.2 Highorg.eclipse.jetty:jetty-jaspiTuxCareIn Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to...6.9 Mediumorg.eclipse.jetty:jetty-jaspiTuxCareTuxCare security update for 123 packages (8 CVEs)5.6 Mediumorg.eclipse.jetty:jetty-jaspiTuxCareTuxCare security update for 123 packages (8 CVEs)6.9 Mediumorg.eclipse.jetty:jetty-jaspiTuxCareIn Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`,...8.8 Highorg.eclipse.jetty:jetty-jaspiTuxCareJetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames8.8 Highorg.eclipse.jetty:jetty-jaspiTuxCareUnauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring6.9 Mediumorg.eclipse.jetty:jetty-jaspiTuxCareA client may send a WebSocket frame with an unknown opcode and a very large declared payload...8.7 Highorg.eclipse.jetty:jetty-jaspiTuxCareA client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty...8.3 Highorg.eclipse.jetty:jetty-jaspiTuxCareA client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are...8.7 Highorg.eclipse.jetty:jetty-jaspiTuxCareDigest authentication lossy encoding8.7 Highorg.eclipse.jetty:jetty-jaspiTuxCareEclipse Jetty: HTTP Authority/Host mismatch5.3 Mediumorg.eclipse.jetty:jetty-jaspiTuxCareDuplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables7.4 Highorg.eclipse.jetty:jetty-jaspiTuxCareJetty URI parsing of invalid authority3.7 Loworg.eclipse.jetty:jetty-jaspiTuxCareMadeYouReset HTTP/2 vulnerability7.7 Highorg.eclipse.jetty:jetty-jaspiTuxCareJetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks5.9 Mediumorg.eclipse.jetty:jetty-jaspiTuxCareEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highorg.eclipse.jetty:jetty-jaspiTuxCareJetty's OpenId Revoked authentication allows one request3.5 Loworg.eclipse.jetty:jetty-jaspiTuxCareJetty accepts "+" prefixed value in Content-Length5.3 Mediumorg.eclipse.jetty:jetty-jaspiTuxCareInstallation information leak in Eclipse Jetty5.3 Medium