maven

org.eclipse.jetty:jetty-server

29 Total advisories

29 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.eclipse.jetty:jetty-server is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

org.eclipse.jetty:jetty-server

Vulnerabilities

Eclipse Jetty: HTTP Authority/Host mismatch

Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections

The Eclipse Jetty Server Artifact has a Gzip request memory leak

**UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request

Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks

Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies

OutOfMemoryError for large multipart without filename in Eclipse Jetty

Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests

SessionListener can prevent a session from being invalidated breaking logout

Jetty SslConnection does not release pooled ByteBuffers in case of errors

Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources

Buffer not correctly recycled in Gzip Request inflation

DOS vulnerability for Quoted Quality CSV headers

Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server

Improper Input Validation in Jetty

Operation on a Resource after Expiration or Release in Jetty Server

Installation information leak in Eclipse Jetty

Access and integrity issue within Eclipse Jetty

Critical severity vulnerability that affects org.eclipse.jetty:jetty-server

Jetty vulnerable to exposure of sensitive information due to observable discrepancy

Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request

Jetty vulnerable to exposure of sensitive information to unauthenticated remote users

Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling)

Cross-site Scripting in Eclipse Jetty

Eclipse Jetty Server generates error message containing sensitive information

Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)

Unescaped exception messages in error responses in Jetty

Information Exposure vulnerability in Eclipse Jetty

Jetty Uses Predictable Session Identifiers

Browse more Maven advisories

Start Securing

UNSUPPORTED WHEN ASSIGNED GzipHandler causes part of request body to be seen as request body of a separate request