Lucene search
Redhat.comRH:CVE-2023-36479HistorySep 22, 2023 - 8:24 p.m.
CVE-2023-36479
2023-09-2220:24:51
redhat.com
access.redhat.com
22
cve-2023-36479
jetty
cgi servlet
command execution
unauthorized
0.001 Low
EPSS
Percentile
22.0%
A flaw was found in Jetty’s CGI servlet which permits incorrect command execution in specific circumstances such as requests with certain characters in requested filenames. This issue could allow an attacker to run permitted commands other than the one requested.
Related
openvas
openvas
Eclipse Jetty CgiServlet Vulnerability (GHSA-3gh6-v5v9-6v9j) - Linux
2023-09-19 00:00:00
Eclipse Jetty CgiServlet Vulnerability (GHSA-3gh6-v5v9-6v9j) - Windows
2023-09-19 00:00:00
Debian: Security Advisory (DLA-3592-1)
2023-10-02 00:00:00
github
github
Jetty vulnerable to errant command quoting in CGI Servlet
2023-09-14 16:16:00
debiancve
debiancve
CVE-2023-36479
2023-09-15 19:15:08
osv
osv
CVE-2023-36479
2023-09-15 19:15:08
Jetty vulnerable to errant command quoting in CGI Servlet
2023-09-14 16:16:00
jetty9 - security update
2023-09-30 00:00:00
cvelist
cvelist
CVE-2023-36479 Jetty vulnerable to errant command quoting in CGI Servlet
2023-09-15 18:37:35
amazon
amazon
Medium: jetty
2024-01-03 21:04:00
cve
cve
CVE-2023-36479
2023-09-15 19:15:08
prion
prion
Design/Logic Flaw
2023-09-15 19:15:00
ibm
ibm
cgr
cgr
CVE-2023-36479 vulnerabilities
2024-05-18 03:08:02
wolfi
wolfi
CVE-2023-36479 vulnerabilities
2024-05-18 03:12:40
nessus
nessus
Amazon Linux 2 : jetty (ALAS-2024-2394)
2024-01-09 00:00:00
Debian DLA-3592-1 : jetty9 - LTS security update
2023-10-01 00:00:00
veracode
veracode
Arbitrary Code Execution
2023-09-20 10:17:36
ubuntucve
ubuntucve
CVE-2023-36479
2023-09-15 00:00:00
redos
redos
ROS-20240409-12
2024-04-09 00:00:00
debian
debian
[SECURITY] [DLA 3592-1] jetty9 security update
2023-09-30 12:36:17
[SECURITY] [DSA 5507-1] jetty9 security update
2023-09-28 22:37:26
redhat
redhat
(RHSA-2024:0797) Important: Satellite 6.14.2 Async Security Update
2024-02-13 14:38:17
(RHSA-2023:7247) Critical: Red Hat Fuse 7.12.1 release and security update
2023-11-15 17:06:12
(RHSA-2024:2010) Important: Satellite 6.15.0 release
2024-04-23 17:00:52
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00