org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc1) +33 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.1.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc0) +34 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.1.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.1.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.apache.vysper.extensions:xep0124-xep0206-bosh (0.6), org.apache.vysper:vysper (0.6) +39 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.1.3.v20100526)

org.eclipse.jetty:jetty-server MAVEN version 7.1.3.v20100526 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.vysper.extensions:xep0124-xep0206-bosh 0.6 - org.apache.vysper:vysper 0.6 -...

org.eclipse.jetty.aggregate:jetty-all (7.1.2.v20100523), org.eclipse.jetty.aggregate:jetty-all-server (7.1.2.v20100523) +33 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.1.2.v20100523)

org.eclipse.jetty:jetty-server MAVEN version 7.1.2.v20100523 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.2.v20100523 -...

Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

GHSA-872G-2H8H-362Q Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +580 more potentially affected by CVE-2016-4800 via org.eclipse.jetty:jetty-server (>=9.3.0.v20150612, <=9.3.9.m1)

org.eclipse.jetty:jetty-server MAVEN version =9.3.0.v20150612, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744...

at.yawk.dropwizard-nagios:dropwizard-nagios (1.0), br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=1.0.0) +1235 more potentially affected by CVE-2018-12536 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.10.v20180503)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.1.0, =0.0.1, =1.1, =1.1, =1.1, =0.9.1, =0.0.5, =0.0.5, =0.0.5, =0.0.7 - cn.spring-up:spring-co 0.1 - cn.spring-up:spring-import 0.1 and more Source cves: CVE-2018-12536 Source advisory: GHSA-9RGV-H7X4-QW8G...

GHSA-9RGV-H7X4-QW8G Eclipse Jetty Server generates error message containing sensitive information

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

Eclipse Jetty Server generates error message containing sensitive information

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +3966 more potentially affected by CVE-2018-12536 via org.eclipse.jetty:jetty-server (>=9.0.0.v20130308, <=9.3.23.v20180228)

org.eclipse.jetty:jetty-server MAVEN version =9.0.0.v20130308, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744...

at.yawk.dropwizard-nagios:dropwizard-nagios (1.0), br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=1.0.0) +1235 more potentially affected by CVE-2018-12536 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.10.v20180503)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.1.0, =0.0.1, =1.1, =1.1, =1.1, =0.9.1, =0.0.5, =0.0.5, =0.0.5, =0.0.7 - cn.spring-up:spring-co 0.1 - cn.spring-up:spring-import 0.1 and more Source cves: CVE-2018-12536 Source advisory: OSV:GHSA-9RGV-H7X4-QW8G...

com.bbn.adept:adept-api (>=2.7.3, <=2.7.4), com.bbn.adept:adept-kb (>=2.7.3, <=2.7.4) +127 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.9.v20130131)

org.eclipse.jetty:jetty-server MAVEN version 8.1.9.v20130131 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.bbn.adept:adept-api =2.7.3, =2.7.3, =2.7.3, =0.52, =2.2.0, =1.0.0, =1.0.3 and more...

io.restx:restx-server-jetty7 (>=0.35-rc1, <=0.35.1), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.6.8, <=1.8.2) +41 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.21.v20160908)

org.eclipse.jetty:jetty-server MAVEN version 7.6.21.v20160908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - io.restx:restx-server-jetty7 =0.35-rc1, =1.6.8, =1.8.3, =1.9.4 -...

br.com.arsmachina:tapestry-url-rewriter (>=1.0.1, <=2.0.0), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2) +93 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.v20091005)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.v20091005 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - br.com.arsmachina:tapestry-url-rewriter =1.0.1, =2.0.0 -...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc0) +42 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc2) +42 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...

com.github.rest-driver:rest-client-driver (>=1.1.11, <=1.1.14), io.opentelemetry.javaagent:opentelemetry-testing-common (>=0.15.0, <=1.2.0-alpha) +41 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.0.0.v20110901)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.v20110901 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.rest-driver:rest-client-driver =1.1.11, =0.15.0, =1.2.0-alpha -...

com.ocpsoft.rewrite:rewrite-test-harness (>=1.0.0.alpha7, <=1.0.0.alpha11), org.apache.asterix:asterix-installer (0.8.8-incubating) +56 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.0.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.ocpsoft.rewrite:rewrite-test-harness =1.0.0.alpha7, =0.2.16-incubating, =0.2.16-incubating,...

com.ocpsoft.rewrite:rewrite-test-harness (>=1.0.0.alpha1, <=1.0.0.alpha6), de.ipk-gatersleben:edal-metadataapi (>=2.2.28, <=2.3.1) +42 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.0.0.m3)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.ocpsoft.rewrite:rewrite-test-harness =1.0.0.alpha1, =2.2.28, =2.2.2, =2.3.1 -...