org.eclipse.jetty:jetty-openid vulnerabilities (TuxCare)
29 vulnerabilities.
org.eclipse.jetty:jetty-openidTuxCareTuxCare security update for 123 packages (1 CVE)No scoreorg.eclipse.jetty:jetty-openidTuxCareWhen Jetty's `HttpClient` make a request to a server through a forward proxy, the server may...8.2 Highorg.eclipse.jetty:jetty-openidTuxCareIn Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ```...8.2 Highorg.eclipse.jetty:jetty-openidTuxCareIn Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to...6.9 Mediumorg.eclipse.jetty:jetty-openidTuxCareTuxCare security update for 123 packages (8 CVEs)5.6 Mediumorg.eclipse.jetty:jetty-openidTuxCareTuxCare security update for 123 packages (8 CVEs)6.9 Mediumorg.eclipse.jetty:jetty-openidTuxCareIn Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`,...8.8 Highorg.eclipse.jetty:jetty-openidTuxCareJetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames8.8 Highorg.eclipse.jetty:jetty-openidTuxCareUnauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring6.9 Mediumorg.eclipse.jetty:jetty-openidTuxCareA client may send a WebSocket frame with an unknown opcode and a very large declared payload...8.7 Highorg.eclipse.jetty:jetty-openidTuxCareA client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty...8.3 Highorg.eclipse.jetty:jetty-openidTuxCareA client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are...8.7 Highorg.eclipse.jetty:jetty-openidTuxCareDigest authentication lossy encoding8.7 Highorg.eclipse.jetty:jetty-openidTuxCareEclipse Jetty: HTTP Authority/Host mismatch5.3 Mediumorg.eclipse.jetty:jetty-openidTuxCareDuplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables7.4 Highorg.eclipse.jetty:jetty-openidTuxCareMadeYouReset HTTP/2 vulnerability7.7 Highorg.eclipse.jetty:jetty-openidTuxCareEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations3.7 Loworg.eclipse.jetty:jetty-openidTuxCareJetty DOS vulnerability on DosFilter5.3 Mediumorg.eclipse.jetty:jetty-openidTuxCareJetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks5.9 Mediumorg.eclipse.jetty:jetty-openidTuxCareJetty PushSessionCacheFilter can cause remote DoS attacks3.1 Loworg.eclipse.jetty:jetty-openidTuxCareJetty connection leaking on idle timeout when TCP congested7.5 Highorg.eclipse.jetty:jetty-openidTuxCareEclipse Jetty GZIP buffer release7.2 Highorg.eclipse.jetty:jetty-openidTuxCareEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highorg.eclipse.jetty:jetty-openidTuxCareJetty's OpenId Revoked authentication allows one request3.5 Loworg.eclipse.jetty:jetty-openidTuxCareJetty accepts "+" prefixed value in Content-Length5.3 Mediumorg.eclipse.jetty:jetty-openidTuxCareJetty vulnerable to errant command quoting in CGI Servlet3.5 Loworg.eclipse.jetty:jetty-openidTuxCareCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4 Loworg.eclipse.jetty:jetty-openidTuxCareOutOfMemoryError for large multipart without filename in Eclipse Jetty5.3 Mediumorg.eclipse.jetty:jetty-openidTuxCareEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations5.3 Medium