Skip to content
OpenAdvisories

Vendor

eclipse

16 known vulnerabilities.

Products

jetty.project 6 Mosquitto 3 keti 2 Equinox OSGi 2 CycloneDDS 2 deeplearning4j 1 IDE 0 Jetty < 9.4.43 0 Jetty < 10.0.6 0 Jetty < 11.0.6 0 Jetty 0 Jetty < 10.0.16 0 Jetty < 11.0.16 0 Jetty < 12.0.0 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.4
    CVE-2023-26049 Public exploit

    Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty

    Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a co…

    eclipse jetty.project jetty9 org.eclipse.jetty:jetty-server Debian Ubuntu Maven