0.001 Low
EPSS
Percentile
40.3%
A flaw was found in the jetty-server package. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies or otherwise perform unintended behavior by tampering with the cookie parsing mechanism.
bugzilla.redhat.com/show_bug.cgi?id=2236341
github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c
nvd.nist.gov/vuln/detail/CVE-2023-26049
www.cve.org/CVERecord?id=CVE-2023-26049