Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: The Eclipse Foundation Eclipse Jetty — DSA-4278 Clear all filters
TI-2017-05294 CVE-2017-7658 · GHSA-6x9x-8qw9-9pp6

In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x…

Priority MEDIUM 60

In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18996 Published 2018-06-26 Partial fix · 9.2.25, 9.3.24 +4 CWE-444
TI-2017-05293 CVE-2017-7657 · GHSA-vgg8-72f2-qm23

Integer overflow in Eclipse Jetty

Priority MEDIUM 57

In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14371 Published 2018-06-26 Partial fix · 9.3.24, 9.4.11 +2 CWE-444