jetty vulnerabilities (Ubuntu)
28 vulnerabilities.
-
jettyUbuntu When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may... 8.2 High -
jettyUbuntu In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ```... 8.2 High -
jettyUbuntu In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to... 6.9 Medium -
jettyUbuntu In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`,... 8.8 High -
jettyUbuntu A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty... 8.3 High -
jettyUbuntu Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables 7.4 High -
jettyUbuntu Eclipse Jetty HTTP clients can increase memory allocation 7.5 High -
jettyUbuntu Jetty URI parsing of invalid authority 3.7 Low -
jettyUbuntu HTTP/2 HPACK integer overflow and buffer allocation 7.5 High -
jettyUbuntu MadeYouReset HTTP/2 vulnerability 7.7 High -
jettyUbuntu Jetty DOS vulnerability on DosFilter 5.3 Medium -
jettyUbuntu Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 5.9 Medium -
jettyUbuntu Jetty PushSessionCacheFilter can cause remote DoS attacks 3.1 Low -
jettyUbuntu Jetty connection leaking on idle timeout when TCP congested 7.5 High -
jettyUbuntu Jetty vulnerable to errant command quoting in CGI Servlet 3.5 Low -
jettyUbuntu Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty 2.4 Low -
jettyUbuntu OutOfMemoryError for large multipart without filename in Eclipse Jetty 5.3 Medium -
jettyUbuntu Jetty SslConnection does not release pooled ByteBuffers in case of errors 7.5 High -
jettyUbuntu Jetty invalid URI parsing may produce invalid HttpURI.authority 2.7 Low -
jettyUbuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
jettyUbuntu SessionListener can prevent a session from being invalidated breaking logout 2.9 Low -
jettyUbuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 5.3 Medium -
jettyUbuntu Buffer not correctly recycled in Gzip Request inflation 4.8 Medium -
jettyUbuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.0 High -
jettyUbuntu Unescaped exception messages in error responses in Jetty 6.1 Medium -
jettyUbuntu Installation information leak in Eclipse Jetty 5.3 Medium -
jettyUbuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 6.1 Medium -
jettyUbuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High