Eclipse Jetty.project vulnerabilities

• eclipse jetty, debian linux, eclipse jetty.project +1 more +3 more HTTP/2 HPACK integer overflow and buffer allocation CVE-2023-36478 Fix available 7.5 HighOctober 10, 2023
• eclipse jetty, debian linux, eclipse jetty.project +2 more +4 more Jetty connection leaking on idle timeout when TCP congested CVE-2024-22201 Fix available 7.5 HighJuly 10, 2023
• eclipse jetty, debian linux, eclipse jetty.project +2 more Jetty's OpenId Revoked authentication allows one request CVE-2023-41900 Fix available 3.5 LowJuly 10, 2023
• eclipse jetty, debian linux, eclipse jetty.project +2 more Jetty accepts "+" prefixed value in Content-Length CVE-2023-40167 Public exploitFix available 5.3 MediumJuly 10, 2023
• eclipse jetty, debian linux, eclipse jetty.project +2 more Jetty vulnerable to errant command quoting in CGI Servlet CVE-2023-36479 Fix available 3.5 LowJuly 10, 2023
• eclipse jetty, debian linux, eclipse jetty.project +4 more +6 more Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty CVE-2023-26049 Public exploitFix available 2.4 LowApril 18, 2023
• eclipse jetty, jetty.project +1 more OutOfMemoryError for large multipart without filename in Eclipse Jetty CVE-2023-26048 Public exploitFix available 5.3 MediumApril 18, 2023