Cross-Site Scripting (XSS)

jetty-server is vulnerable to cross-site scripting. The server response containing the default error message from stacktraces is not sanitized and escaped before being displayed, which would allow a remote attacker to inject arbitrary Javascript into a victim's browser...

co.wrisk.dropwizard:dropwizard-hk2 (0.0.6), com.aspectran:aspectran-demo (>=6.4.0-m1, <=6.4.2) +165 more potentially affected by CVE-2019-17632 via org.eclipse.jetty:jetty-server (9.4.21.v20190926)

org.eclipse.jetty:jetty-server MAVEN version 9.4.21.v20190926 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.wrisk.dropwizard:dropwizard-hk2 0.0.6 - com.aspectran:aspectran-demo =6.4.0-m1,...

app.cash.backfila:service-lib (>=0.1.0, <=0.1.3-20200811-2e41939), com.anzhilai:xdcore (>=1.0.4, <=1.1.0) +155 more potentially affected by CVE-2019-17632 via org.eclipse.jetty:jetty-server (9.4.22.v20191022)

org.eclipse.jetty:jetty-server MAVEN version 9.4.22.v20191022 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - app.cash.backfila:service-lib =0.1.0, =1.0.4, =6.4.3, =6.4.3, =1.34.2, =1.34.2, =1.34.2,...

app.cash.backfila:service-lib (>=0.1.0, <=0.1.3-20200811-2e41939), co.wrisk.dropwizard:dropwizard-hk2 (0.0.6) +270 more potentially affected by CVE-2019-17632 via org.eclipse.jetty:jetty-server (>=9.4.21.v20190926, <=9.4.23.v20191118)

org.eclipse.jetty:jetty-server MAVEN version =9.4.21.v20190926, =0.1.0, =1.0.4, =6.4.0-m1, =6.4.0-m1, =1.34.2, =1.34.2, =1.34.2, =1.34.3 - com.github.claremontqualitymanagement:taf.websupport 4.0.0 - com.github.mjeanroy:junit-servers-jetty 2.0.0 and more Source cves: CVE-2019-17632 Source advisor...

com.aspectran:aspectran-demo (6.5.0-rc2), com.aspectran:aspectran-with-jetty (6.5.0-rc2) +67 more potentially affected by CVE-2019-17632 via org.eclipse.jetty:jetty-server (9.4.23.v20191118)

org.eclipse.jetty:jetty-server MAVEN version 9.4.23.v20191118 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.aspectran:aspectran-demo 6.5.0-rc2 - com.aspectran:aspectran-with-jetty 6.5.0-rc2 -...

CVE-2009-5045

Dump Servlet information leak in jetty before 6.1.22...

CVE-2009-5048

Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...

ai.h2o:h2o-algos (>=3.16.0.5, <=3.16.0.12), ai.h2o:h2o-app (>=3.16.0.5, <=3.16.0.12) +2322 more potentially affected by CVE-2019-10246 via org.eclipse.jetty:jetty-server (>=9.2.0.v20140526, <=9.2.27.v20190403)

org.eclipse.jetty:jetty-server MAVEN version =9.2.0.v20140526, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.12 and more Source cves: CVE-2019-10246 Source advisory:...

ai.h2o:h2o-algos (>=3.16.0.5, <=3.16.0.12), ai.h2o:h2o-app (>=3.16.0.5, <=3.16.0.12) +2322 more potentially affected by CVE-2019-10246 via org.eclipse.jetty:jetty-server (>=9.2.0.v20140526, <=9.2.27.v20190403)

org.eclipse.jetty:jetty-server MAVEN version =9.2.0.v20140526, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.12 and more Source cves: CVE-2019-10246 Source advisory:...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +2450 more potentially affected by CVE-2019-10246 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.16.v20190411)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =2.0.3.release, =2.1.4.release, =2.0.2.release, =2.1.2.release -...

ai.h2o:h2o-algos (>=3.0.1.2, <=3.22.0.5), ai.h2o:h2o-app (>=3.0.1.2, <=3.30.0.6) +5089 more potentially affected by CVE-2019-10247 via org.eclipse.jetty:jetty-server (>=7.0.0.v20091005, <=9.2.27.v20190403)

org.eclipse.jetty:jetty-server MAVEN version =7.0.0.v20091005, =3.0.1.2, =3.0.1.2, =3.12.0.1, =3.8.2.4, =3.0.1.2, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.10.5.1, =3.22.1.1, =3.10.0.5, =3.10.0.7, =3.20.0.1, =3.0.1.2, =3.20.0.4, =3.22.0.5 and more Source cves: CVE-2019-10247 Source advisory:...

org.apache.camel:camel-cometd (>=2.9.0-rc1, <=2.9.0), org.apache.camel:camel-example-cxf (>=2.9.0-rc1, <=2.9.0) +109 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.5.3.v20111011)

org.eclipse.jetty:jetty-server MAVEN version 7.5.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.camel:camel-cometd =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1,...

org.cometd.java:cometd-examples-java (1.0.0rc0), org.cometd.java:cometd-java-oort (1.0.0rc0) +33 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.0.0.rc4)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.0.0rc0 - org.cometd.java:cometd-java-oort 1.0.0rc0 -...

org.apache.felix:org.apache.felix.http.bundle (2.2.2), org.apache.felix:org.apache.felix.http.jetty (2.2.2) +52 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.13.v20130916)

org.eclipse.jetty:jetty-server MAVEN version 7.6.13.v20130916 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.felix:org.apache.felix.http.bundle 2.2.2 -...

com.xpatterns.spark.parquet:spark-parquet-utility (1.0.0-spark1.3.1), org.akhikhl.gretty:gretty-runner-jetty7 (>=1.1.0, <=1.1.8) +62 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 7.6.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.xpatterns.spark.parquet:spark-parquet-utility 1.0.0-spark1.3.1 -...

com.hazelcast:hazelcast-jetty7-sessionmanager (>=1.0, <=1.0.2), org.akhikhl.gretty:gretty-runner-jetty7 (>=1.1.9, <=2.0.0) +52 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.16.v20140903)

org.eclipse.jetty:jetty-server MAVEN version 7.6.16.v20140903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.hazelcast:hazelcast-jetty7-sessionmanager =1.0, =1.1.9, =1.4.10, =1.4.14 -...

com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x (>=1.0.1, <=1.0.2), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.4.15, <=1.6.7) +39 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.17.v20150415)

org.eclipse.jetty:jetty-server MAVEN version 7.6.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x =1.0.1, =1.4.15, =1.6.7 -...

com.bacoder.jgit:org.eclipse.jgit.junit.http (>=3.1.0-201308312337-r, <=3.1.0-201309071158-r), org.apache.tapestry:tapestry-runner (>=5.4-beta-3, <=5.4.5) +57 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.11.v20130520)

org.eclipse.jetty:jetty-server MAVEN version 7.6.11.v20130520 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.bacoder.jgit:org.eclipse.jgit.junit.http =3.1.0-201308312337-r, =5.4-beta-3,...

org.eclipse.jetty.aggregate:jetty-all (7.6.20.v20160902), org.eclipse.jetty.aggregate:jetty-all-server (7.6.20.v20160902) +36 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.20.v20160902)

org.eclipse.jetty:jetty-server MAVEN version 7.6.20.v20160902 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.20.v20160902 -...

com.github.rest-driver:rest-client-driver (>=1.1.20, <=1.1.30), com.groupdocs:groupdocs-java-client (1.1) +65 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (8.1.0.v20120127)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.v20120127 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.rest-driver:rest-client-driver =1.1.20, =1.0.9, =1.0.10 -...