GHSA-R7M4-F9H5-GR79 Eclipse Jetty's PushSessionCacheFilter can cause remote DoS attacks

🗓️ 14 Oct 2024 21:07:29Reported by GoogleType

Jetty PushSessionCacheFilter can enable unauthenticated remote Denial of Service via memory exhaustion; avoid by not using it.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: User Entity Behavior Analytics app for IBM QRadar SIEM includes components with known vulnerabilities	29 Aug 202517:52	–	ibm
AstraLinux	Astra Linux - уязвимость в jetty9	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the HttpURI class in Eclipse Jetty’s server container allows a attacker to perform an SSRF attack.	22 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Eclipse Jetty servlet containers, related to uncontrolled resource consumption, allows attackers to cause service failures.	27 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Eclipse Jetty servlet containers, related to improper cleaning or release of resources, allows attackers to trigger a service failure.	17 Jul 202500:00	–	bdu_fstec
Circl	CVE-2024-6762	14 Oct 202419:11	–	circl
CNNVD	Eclipse Jetty 安全漏洞	14 Oct 202400:00	–	cnnvd
CVE	CVE-2024-6762	14 Oct 202415:07	–	cve
Cvelist	CVE-2024-6762 Jetty PushSessionCacheFilter can cause remote DoS attacks	14 Oct 202415:07	–	cvelist
Debian	[SECURITY] [DLA 4106-1] jetty9 security update	1 Apr 202522:02	–	debian

Source	Link
github	www.github.com/jetty/jetty.project/security/advisories/GHSA-r7m4-f9h5-gr79
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-6762
github	www.github.com/jetty/jetty.project/pull/10755
github	www.github.com/jetty/jetty.project/pull/10756
github	www.github.com/jetty/jetty.project/pull/9715
github	www.github.com/jetty/jetty.project/pull/9716
github	www.github.com/jetty/jetty.project
gitlab	www.gitlab.eclipse.org/security/cve-assignement/-/issues/24
lists	www.lists.debian.org/debian-lts-announce/2025/04/msg00001.html

03 Nov 2025 23:16Current

7High risk

Vulners AI Score7

CVSS 42.3

CVSS 3.13.1

EPSS0.00563