Skip to content
OpenAdvisories

Vendor

eclipse

16 known vulnerabilities.

Products

jetty.project 6 Mosquitto 3 keti 2 Equinox OSGi 2 CycloneDDS 2 deeplearning4j 1 IDE 0 Jetty < 9.4.43 0 Jetty < 10.0.6 0 Jetty < 11.0.6 0 Jetty 0 Jetty < 10.0.16 0 Jetty < 11.0.16 0 Jetty < 12.0.0 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.5
    CVE-2023-41900

    Jetty's OpenId Revoked authentication allows one request

    Jetty is a Java based web server and servlet engine. Versions 9.4.21 through 9.4.51, 10.0.15, and 11.0.15 are vulnerable to weak authentication. If a Jetty `OpenIdAuthenticator` uses the optional nested `LoginService`, and that `LoginService` decides to revok…

    eclipse jetty.project jetty9 jetty9 Debian Ubuntu Maven
  • Low 3.5
    CVE-2023-36479

    Jetty vulnerable to errant command quoting in CGI Servlet

    Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for…

    eclipse jetty.project jetty9 jetty Debian Ubuntu Maven
  • Low 2.4
    CVE-2023-26049 Public exploit

    Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty

    Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a co…

    eclipse jetty.project jetty9 org.eclipse.jetty:jetty-server Debian Ubuntu Maven