Skip to content
OpenAdvisories

Package · Debian

jetty9

52 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.4
    CVE-2023-26049 Public exploit

    Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty

    Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a co…

    eclipse jetty.project jetty9 org.eclipse.jetty:jetty-server Debian Ubuntu Maven
  • Low 2.9
    CVE-2021-34428 Public exploit

    SessionListener can prevent a session from being invalidated breaking logout

    For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple con…

    The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven