Eclipse Jetty Security Vulnerability

🗓️ 15 Sep 2023 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

A security vulnerability in the Eclipse Jetty Canonical Repository lets servlet users with a specific command structure execute incorrect commands.

Reporter	Title	Published	Views	Family All 122
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in eclipse jetty affect IBM Business Automation Workflow	3 Jun 202413:36	–	ibm
IBM Security Bulletins	Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester	18 Dec 202312:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector	22 Oct 202512:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Eclipse Jetty	29 Nov 202314:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in its dependencies (CVE-2022-45688, CVE-2023-28439, CVE-2023-33201, CVE-2023-41900, CVE-2023-36479, CVE-2023-40167, CVE-2023-36478, )	24 Mar 202514:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Browser User Interface is vulnerable to multiple vulnerabilities due to Eclipse Jetty	24 Nov 202302:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse Jetty (CVE-2023-40167, CVE-2023-41900, CVE-2023-36479, CVE-2023-36478)	15 Dec 202316:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities	5 Feb 202415:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway and VPN Module affected by multiple vulnerabilities	6 Feb 202419:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Rational Change	8 Oct 202413:07	–	ibm

Source	Link
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-3gh6-v5v9-6v9j
github	www.github.com/eclipse/jetty.project/pull/9888
github	www.github.com/eclipse/jetty.project/pull/9889
github	www.github.com/eclipse/jetty.project/pull/9516
debian	www.debian.org/security/2023/dsa-5507
lists	www.lists.debian.org/debian-lts-announce/2023/09/msg00039.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-36479
cxsecurity	www.cxsecurity.com/cveshow/CVE-2023-36479/
auscert	www.auscert.org.au/bulletins/ESB-2023.7593
auscert	www.auscert.org.au/bulletins/ESB-2023.6249

16 Jan 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.13.1 - 3.5

EPSS0.01383

SSVC

Eclipse Jetty Canonical Repository security vulnerability servlet users command structure incorrect commands