Skip to content
OpenAdvisories

Weakness (CWE)

CWE-672: Operation on a Resource after Expiration or Release

Class Draft

The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

Source: MITRE CWE-672

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2019-17638 Public exploit EPSS 11%

    Operation on a Resource after Expiration or Release in Jetty Server

    In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the Byte…

    The Eclipse Foundation Eclipse Jetty jetty9 org.eclipse.jetty:jetty-server Debian Maven