org.eclipse.jetty:jetty-servlets vulnerabilities (TuxCare)
39 vulnerabilities.
-
org.eclipse.jetty:jetty-servletsTuxCare TuxCare security update for 123 packages (1 CVE) No score -
org.eclipse.jetty:jetty-servletsTuxCare When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may... 8.2 High -
org.eclipse.jetty:jetty-servletsTuxCare In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ```... 8.2 High -
org.eclipse.jetty:jetty-servletsTuxCare In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to... 6.9 Medium -
org.eclipse.jetty:jetty-servletsTuxCare TuxCare security update for 123 packages (8 CVEs) 5.6 Medium -
org.eclipse.jetty:jetty-servletsTuxCare TuxCare security update for 123 packages (8 CVEs) 6.9 Medium -
org.eclipse.jetty:jetty-servletsTuxCare In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`,... 8.8 High -
org.eclipse.jetty:jetty-servletsTuxCare Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames 8.8 High -
org.eclipse.jetty:jetty-servletsTuxCare Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring 6.9 Medium -
org.eclipse.jetty:jetty-servletsTuxCare A client may send a WebSocket frame with an unknown opcode and a very large declared payload... 8.7 High -
org.eclipse.jetty:jetty-servletsTuxCare A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty... 8.3 High -
org.eclipse.jetty:jetty-servletsTuxCare A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are... 8.7 High -
org.eclipse.jetty:jetty-servletsTuxCare Digest authentication lossy encoding 8.7 High -
org.eclipse.jetty:jetty-servletsTuxCare Jetty URI parsing of invalid authority 3.7 Low -
org.eclipse.jetty:jetty-servletsTuxCare MadeYouReset HTTP/2 vulnerability 7.7 High -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 3.7 Low -
org.eclipse.jetty:jetty-servletsTuxCare Jetty DOS vulnerability on DosFilter 5.3 Medium -
org.eclipse.jetty:jetty-servletsTuxCare Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 5.9 Medium -
org.eclipse.jetty:jetty-servletsTuxCare Jetty PushSessionCacheFilter can cause remote DoS attacks 3.1 Low -
org.eclipse.jetty:jetty-servletsTuxCare Jetty connection leaking on idle timeout when TCP congested 7.5 High -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty GZIP buffer release 7.2 High -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
org.eclipse.jetty:jetty-servletsTuxCare Jetty's OpenId Revoked authentication allows one request 3.5 Low -
org.eclipse.jetty:jetty-servletsTuxCare Jetty accepts "+" prefixed value in Content-Length 5.3 Medium -
org.eclipse.jetty:jetty-servletsTuxCare Jetty vulnerable to errant command quoting in CGI Servlet 3.5 Low -
org.eclipse.jetty:jetty-servletsTuxCare Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty 2.4 Low -
org.eclipse.jetty:jetty-servletsTuxCare OutOfMemoryError for large multipart without filename in Eclipse Jetty 5.3 Medium -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 5.3 Medium -
org.eclipse.jetty:jetty-servletsTuxCare Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources 7.5 High -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.0 High -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 9.4 Critical -
org.eclipse.jetty:jetty-servletsTuxCare Installation information leak in Eclipse Jetty 5.3 Medium -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 6.1 Medium -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 5.3 Medium -
org.eclipse.jetty:jetty-servletsTuxCare Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) 9.8 Critical -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 9.8 Critical -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
org.eclipse.jetty:jetty-servletsTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High