Skip to content
OpenAdvisories

Vendor

eclipse

16 known vulnerabilities.

Products

jetty.project 6 Mosquitto 3 keti 2 Equinox OSGi 2 CycloneDDS 2 deeplearning4j 1 IDE 0 Jetty < 9.4.43 0 Jetty < 10.0.6 0 Jetty < 11.0.6 0 Jetty 0 Jetty < 10.0.16 0 Jetty < 11.0.16 0 Jetty < 12.0.0 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-40167 Public exploit

    Jetty accepts "+" prefixed value in Content-Length

    Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and othe…

    eclipse jetty.project jetty9 jetty9 Debian Ubuntu Maven
  • Medium 5.3
    CVE-2023-26048 Public exploit

    OutOfMemoryError for large multipart without filename in Eclipse Jetty

    Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` wh…

    eclipse jetty.project jetty9 org.eclipse.jetty:jetty-server Debian Ubuntu Maven