com.adaptrex:adaptrex-server (0.1.1), com.hmsonline:dropwizard-spring (>=0.1.1, <=0.1.2) +83 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.4.v20120524)

org.eclipse.jetty:jetty-server MAVEN version 8.1.4.v20120524 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.adaptrex:adaptrex-server 0.1.1 - com.hmsonline:dropwizard-spring =0.1.1, =0.20.0,...

com.adaptrex:adaptrex-server (>=0.5.0, <=0.9.12), com.bazaarvoice.dropwizard:dropwizard-configurable-assets-bundle (>=0.1.4, <=0.1.7) +79 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.5.v20120716)

org.eclipse.jetty:jetty-server MAVEN version 8.1.5.v20120716 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.adaptrex:adaptrex-server =0.5.0, =0.1.4, =0.5.1-1, =0.5.1-1, =0.6.0, =0.5.0, =1.1.0,...

com.xpatterns.spark.parquet:spark-parquet-utility (1.0.0-spark1.3.1), org.akhikhl.gretty:gretty-runner-jetty7 (>=1.1.0, <=1.1.8) +62 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.6.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 7.6.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.xpatterns.spark.parquet:spark-parquet-utility 1.0.0-spark1.3.1 -...

org.eclipse.jetty.aggregate:jetty-all (7.4.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.4.0.rc0) +40 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.4.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.4.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.4.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

at.yawk.dropwizard-nagios:dropwizard-nagios (1.0), br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=1.0.0) +1235 more potentially affected by CVE-2018-12538 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.10.v20180503)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.1.0, =0.0.1, =1.1, =1.1, =1.1, =0.9.1, =0.0.5, =0.0.5, =0.0.5, =0.0.7 - cn.spring-up:spring-co 0.1 - cn.spring-up:spring-import 0.1 and more Source cves: CVE-2018-12538 Source advisory: GHSA-MWCX-532G-8PQ3...

at.yawk.dropwizard-nagios:dropwizard-nagios (1.0), br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=1.0.0) +1235 more potentially affected by CVE-2018-12538 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.10.v20180503)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.1.0, =0.0.1, =1.1, =1.1, =1.1, =0.9.1, =0.0.5, =0.0.5, =0.0.5, =0.0.7 - cn.spring-up:spring-co 0.1 - cn.spring-up:spring-import 0.1 and more Source cves: CVE-2018-12538 Source advisory: OSV:GHSA-MWCX-532G-8PQ3...

Eclipse Jetty Server Fake Pipeline Request Security Bypass Vulnerability - Linux

Eclipse Jetty Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Eclipse Jetty Server InvalidPathException Information Disclosure Vulnerability - Linux

Eclipse Jetty Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Eclipse Jetty Server Fake Pipeline Request Security Bypass Vulnerability - Windows

Eclipse Jetty Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Eclipse Jetty Server Information Disclosure Vulnerability

Eclipse Jetty Server is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . An information disclosure vulnerability exists in Eclipse Jetty Server version 9.x that stems from an error response with an InvalidPathException message containing sensitive...

Unspecified Vulnerability in Eclipse Jetty

Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . A security vulnerability exists in Eclipse Jetty that stems from the program's failure to properly handle the HTTP/0.9 version of the protocol. An attacker could exploit the vulnerabilit...

CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

DEBIAN-CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

UBUNTU-CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

at.yawk.dropwizard-nagios:dropwizard-nagios (1.0), br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=1.0.0) +1235 more potentially affected by CVE-2018-12536 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.10.v20180503)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.1.0, =0.0.1, =1.1, =1.1, =1.1, =0.9.1, =0.0.5, =0.0.5, =0.0.5, =0.0.7 - cn.spring-up:spring-co 0.1 - cn.spring-up:spring-import 0.1 and more Source cves: CVE-2018-12536 Source advisory: MEND:CVE-2018-12536...

CVE-2018-12536

CVE-2018-12536 affects Eclipse Jetty Server (9.x) when webapps use the DefaultServlet/Default Error handling. A specially crafted bad query targeting non-matching URLs can trigger java.nio.file.InvalidPathException during static file serving, and if the error handler reveals the exception message...

CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...