Product by Eclipse Foundation
Jetty.project
7 known vulnerabilities in Jetty.project (Eclipse Foundation), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-36478 | HTTP/2 HPACK integer overflow and buffer allocation | 7.5 | |
| Medium | CVE-2023-26048 | OutOfMemoryError for large multipart without filename in Eclipse Jetty | 5.3 | |
| High | CVE-2024-22201 | Jetty connection leaking on idle timeout when TCP congested | 7.5 | |
| Medium | CVE-2023-40167 | Jetty accepts "+" prefixed value in Content-Length | 5.3 | |
| Low | CVE-2023-36479 | Jetty vulnerable to errant command quoting in CGI Servlet | 3.5 | |
| Medium | CVE-2023-26049 | Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty | 2.4 | |
| Medium | CVE-2023-41900 | Jetty's OpenId Revoked authentication allows one request | 3.5 |