Skip to content
OpenAdvisories

Package · Maven

org.eclipse.jetty:jetty-openid

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.5
    CVE-2023-41900

    Jetty's OpenId Revoked authentication allows one request

    Jetty is a Java based web server and servlet engine. Versions 9.4.21 through 9.4.51, 10.0.15, and 11.0.15 are vulnerable to weak authentication. If a Jetty `OpenIdAuthenticator` uses the optional nested `LoginService`, and that `LoginService` decides to revok…

    Eclipse Foundation jetty.project jetty9 jetty9 Debian Ubuntu Wolfi Maven