jetty8 vulnerabilities (Ubuntu)

13 vulnerabilities.

• jetty8 Ubuntu Jetty SslConnection does not release pooled ByteBuffers in case of errors CVE-2022-2191 Fix available 7.5 HighJuly 7, 2022
• jetty8 Ubuntu Jetty invalid URI parsing may produce invalid HttpURI.authority CVE-2022-2047 Fix available 2.7 LowJuly 7, 2022
• jetty8 Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2022-2048 Fix available 7.5 HighJuly 7, 2022
• jetty8 Ubuntu SessionListener can prevent a session from being invalidated breaking logout CVE-2021-34428 Public exploitFix available 2.9 LowJune 22, 2021
• jetty8 Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2021-28169 Fix available EPSS 78.5% 5.3 MediumJune 9, 2021
• jetty8 Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2020-27216 Fix available 7.0 HighOctober 23, 2020
• jetty8 Ubuntu Unescaped exception messages in error responses in Jetty CVE-2019-17632 Fix available 6.1 MediumNovember 25, 2019
• jetty8 Ubuntu Installation information leak in Eclipse Jetty CVE-2019-10247 Fix available 5.3 MediumApril 22, 2019
• jetty8 Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2019-10241 Fix available 6.1 MediumApril 22, 2019
• jetty8 Ubuntu Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) CVE-2017-7658 Fix available EPSS 19.0% 9.8 CriticalJune 26, 2018
• jetty8 Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-7657 Fix available EPSS 14.4% 9.8 CriticalJune 26, 2018
• jetty8 Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-7656 Fix available 7.5 HighJune 26, 2018
• jetty8 Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-9735 Fix available 7.5 HighJune 16, 2017