49 matches found
CVE-2023-26048 vulnerabilities
Vulnerabilities for packages: cassandra-reaper...
CVE-2023-26048 vulnerabilities
Vulnerabilities for packages: cassandra-reaper...
CVE-2023-26048
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support e.g. annotated with @MultipartConfig that call HttpServletRequest.getParameter or HttpServletRequest.getParts may cause OutOfMemoryError when the client sends a multipart request with a part...
CVE-2023-26048 OutOfMemoryError for large multipart without filename in Eclipse Jetty
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support e.g. annotated with @MultipartConfig that call HttpServletRequest.getParameter or HttpServletRequest.getParts may cause OutOfMemoryError when the client sends a multipart request with a part...
CVE-2023-26048 OutOfMemoryError for large multipart without filename in Eclipse Jetty
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support e.g. annotated with @MultipartConfig that call HttpServletRequest.getParameter or HttpServletRequest.getParts may cause OutOfMemoryError when the client sends a multipart request with a part...
CVE-2023-26048
CVE-2023-26048 (Jetty) affects Jetty’s Java-based web server/servlet engine. Affected servlets using multipart support (e.g., @MultipartConfig) calling HttpServletRequest.getParameter() or getParts() may trigger an OutOfMemoryError when a client sends a multipart part with a name but no filename ...
CVE-2021-26048
CVE-2021-26048 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2020-26048
CVE-2020-26048 relates to CuppaCMS prior to 2019-11-12, where an authenticated attacker can upload a malicious file masquerading as an image and, via a rename function in the file manager, convert the image extension to PHP, enabling remote arbitrary code execution. The vulnerability combines an ...