Skip to content
OpenAdvisories

Package · Maven

org.eclipse.jetty:jetty-xml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.9
    GHSA-58qw-p7qm-5rvh

    Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations

    ### From the reporter > `XmlParser` is vulnerable to XML external entity (XXE) vulnerability. > XmlParser is being used when parsing Jetty’s xml configuration files. An attacker might exploit > this vulnerability in order to achieve SSRF or cause a denial of …

    org.eclipse.jetty:jetty-xml Maven