61 matches found
jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision
A flaw was found in Eclipse Jetty, a widely used web server and servlet container. This vulnerability affects its HTTP Digest authentication mechanism, which is used to verify user identities. The issue arises because Jetty's hash computation for passwords does not correctly handle certain...
9.1CVSS5.8AI score0.00632EPSS
SaveExploits1References4
20