io.restx:restx-server-jetty7 (>=0.35-rc1, <=0.35.1), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.6.8, <=1.8.2) +41 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.21.v20160908)

org.eclipse.jetty:jetty-server MAVEN version 7.6.21.v20160908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - io.restx:restx-server-jetty7 =0.35-rc1, =1.6.8, =1.8.3, =1.9.4 -...

com.github.jep42:robotframework-easycsvmap-remoteserver (>=0.0.2, <=0.0.5), com.github.jep42:robotframework-formatcompare-remoteserver (>=0.0.2, <=0.0.3) +63 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.3.v20120416)

org.eclipse.jetty:jetty-server MAVEN version 7.6.3.v20120416 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.jep42:robotframework-easycsvmap-remoteserver =0.0.2, =0.0.2, =2.0-beta, =0.18,...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc0) +42 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (8.1.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

br.com.caelum.vraptor:vraptor-test (1.0.0), net.javacrumbs:mock-socket-http (>=0.1, <=0.6) +18 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.0.0.m2)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - br.com.caelum.vraptor:vraptor-test 1.0.0 - net.javacrumbs:mock-socket-http =0.1, =0.6 -...

com.ocpsoft.rewrite:rewrite-test-harness (>=1.0.0.alpha1, <=1.0.0.alpha6), de.ipk-gatersleben:edal-metadataapi (>=2.2.28, <=2.3.1) +42 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (8.0.0.m3)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.ocpsoft.rewrite:rewrite-test-harness =1.0.0.alpha1, =2.2.28, =2.2.2, =2.3.1 -...

com.arpnetworking.kairosdb:kairosdb-histograms (>=1.0.0, <=2.1.4), com.cisco.oss.foundation:http-server-jetty-8 (>=1.0.3-1, <=1.0.6-2) +129 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (8.1.16.v20140903)

org.eclipse.jetty:jetty-server MAVEN version 8.1.16.v20140903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.arpnetworking.kairosdb:kairosdb-histograms =1.0.0, =1.0.3-1, =1.2.1, =1.2.1, =5.0.1,...

Information Disclosure

jetty-server is vulnerable to information disclosure. The error page produced from DefaultHandler reveals the base resource directory of each context in the list of contexts...

DEBIAN-CVE-2019-10247

In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches...

ai.h2o:h2o-algos (>=3.16.0.5, <=3.16.0.12), ai.h2o:h2o-app (>=3.16.0.5, <=3.16.0.12) +2322 more potentially affected by CVE-2019-10246 via org.eclipse.jetty:jetty-server (>=9.2.0.v20140526, <=9.2.27.v20190403)

org.eclipse.jetty:jetty-server MAVEN version =9.2.0.v20140526, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.12 and more Source cves: CVE-2019-10246 Source advisory:...

ai.h2o:h2o-algos (>=3.0.1.2, <=3.22.0.5), ai.h2o:h2o-app (>=3.0.1.2, <=3.30.0.6) +5089 more potentially affected by CVE-2019-10247 via org.eclipse.jetty:jetty-server (>=7.0.0.v20091005, <=9.2.27.v20190403)

org.eclipse.jetty:jetty-server MAVEN version =7.0.0.v20091005, =3.0.1.2, =3.0.1.2, =3.12.0.1, =3.8.2.4, =3.0.1.2, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.10.5.1, =3.22.1.1, =3.10.0.5, =3.10.0.7, =3.20.0.1, =3.0.1.2, =3.20.0.4, =3.22.0.5 and more Source cves: CVE-2019-10247 Source advisory:...

ai.h2o:h2o-algos (>=3.0.1.2, <=3.22.0.5), ai.h2o:h2o-app (>=3.0.1.2, <=3.30.0.6) +5099 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (>=7.0.0.m0, <=9.2.26.v20180806)

org.eclipse.jetty:jetty-server MAVEN version =7.0.0.m0, =3.0.1.2, =3.0.1.2, =3.12.0.1, =3.8.2.4, =3.0.1.2, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.10.5.1, =3.22.1.1, =3.10.0.5, =3.10.0.7, =3.20.0.1, =3.0.1.2, =3.20.0.4, =3.22.0.5 and more Source cves: CVE-2019-10241 Source advisory: MEND:CVE-2019-102...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +1659 more potentially affected by CVE-2018-12545 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.12.rc2)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2018-12545 Sourc...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +1659 more potentially affected by CVE-2018-12545 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.12.rc2)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2018-12545 Sourc...

UBUNTU-CVE-2018-12545

In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations require...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +1659 more potentially affected by CVE-2018-12545 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.12.rc2)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2018-12545 Sourc...

CRLF Injection

Jetty Server is vulnerable to CRLF injection. A remote attacker is able to inject arbitrary HTTP headers into the server response to perform response splitting attacks via the reason string in AbstractGenerator.java...

org.apache.camel:camel-cometd (>=2.9.0-rc1, <=2.9.0), org.apache.camel:camel-example-cxf (>=2.9.0-rc1, <=2.9.0) +109 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.5.3.v20111011)

org.eclipse.jetty:jetty-server MAVEN version 7.5.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.camel:camel-cometd =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1,...

org.eclipse.jetty.aggregate:jetty-all (7.6.20.v20160902), org.eclipse.jetty.aggregate:jetty-all-server (7.6.20.v20160902) +36 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.6.20.v20160902)

org.eclipse.jetty:jetty-server MAVEN version 7.6.20.v20160902 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.20.v20160902 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.2.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.0.2.rc0) +37 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.0.2.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.0.2.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.2.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.apache.felix:org.apache.felix.http.bundle (2.2.2), org.apache.felix:org.apache.felix.http.jetty (2.2.2) +52 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.6.13.v20130916)

org.eclipse.jetty:jetty-server MAVEN version 7.6.13.v20130916 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.felix:org.apache.felix.http.bundle 2.2.2 -...