Skip to content
OpenAdvisories

Package · Maven

org.eclipse.jetty:jetty-servlets

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low 3.1
    CVE-2024-6762

    Jetty PushSessionCacheFilter can cause remote DoS attacks

    Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the server’s memory.

    Eclipse Foundation Jetty jetty9 jetty9 Debian Ubuntu Maven
  • Medium 5.3
    CVE-2024-9823

    Jetty DOS vulnerability on DosFilter

    There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory err…

    Eclipse Foundation Eclipse Jetty Jetty Jetty Debian Ubuntu Wolfi Maven
  • Low 3.5
    CVE-2023-36479

    Jetty vulnerable to errant command quoting in CGI Servlet

    Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for…

    Eclipse Foundation jetty.project cassandra-reaper jetty9 Debian Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2021-28169 Scanner template EPSS 78%

    Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability

    For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can ret…

    The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven