Skip to content
OpenAdvisories

Vendor

eclipse

16 known vulnerabilities.

Products

jetty.project 6 Mosquitto 3 keti 2 Equinox OSGi 2 CycloneDDS 2 deeplearning4j 1 IDE 0 Jetty < 9.4.43 0 Jetty < 10.0.6 0 Jetty < 11.0.6 0 Jetty 0 Jetty < 10.0.16 0 Jetty < 11.0.16 0 Jetty < 12.0.0 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-40167 Public exploit

    Jetty accepts "+" prefixed value in Content-Length

    Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and othe…

    eclipse jetty.project jetty9 jetty9 Debian Ubuntu Maven
  • Low 2.4
    CVE-2023-26049 Public exploit

    Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty

    Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a co…

    eclipse jetty.project jetty9 org.eclipse.jetty:jetty-server Debian Ubuntu Maven
  • Medium 5.3
    CVE-2023-26048 Public exploit

    OutOfMemoryError for large multipart without filename in Eclipse Jetty

    Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` wh…

    eclipse jetty.project jetty9 org.eclipse.jetty:jetty-server Debian Ubuntu Maven