Vendor
The Eclipse Foundation
107 known vulnerabilities.
Products
Eclipse Jetty 23
Eclipse Mosquitto 16
Eclipse OpenJ9 14
Eclipse Kura 9
Eclipse Vert.x 6
Eclipse Theia 6
Eclipse OMR 3
Eclipse Californium 3
Eclipse BIRT 2
Eclipse Che 2
Eclipse Memory Analyzer 2
Eclipse hawkBit 2
Eclipse Hono 2
Eclipse GlassFish 1
Eclipse TinyDTLS 1
Eclipse Buildship 1
Eclipse Lyo 1
Eclipse Paho 1
Eclipse Paho MQTT C Client 1
Eclipse BIRT (Business Intelligence Reporting Tool) 1
@theia/plugin-ext 1
Eclipse Xtext 1
Eclipse Vorto 1
Eclipse Equinox p2 1
Eclipse Equinox 1
Eclipse Web Tools Platform 1
Eclipse Platform 1
Jakarta Expression Language Implementation 1
Eclipse Jersey 1
Eclipse Sphinx 1
1 result · Clear filters · Feed
-
Low 2.9CVE-2021-34428 Public exploit
SessionListener can prevent a session from being invalidated breaking logout
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple con…