org.eclipse.jetty:jetty-annotations (7.0.0.m1), org.eclipse.jetty:jetty-deploy (7.0.0.m1) +10 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.0.0.m1)

org.eclipse.jetty:jetty-xml MAVEN version 7.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty:jetty-annotations 7.0.0.m1 - org.eclipse.jetty:jetty-deploy 7.0.0.m1 -...

org.eclipse.jetty:jetty-ajp (7.0.0.m0), org.eclipse.jetty:jetty-annotations (7.0.0.m0) +13 more potentially affected by CVE-2023-26049 via org.eclipse.jetty:jetty-server (7.0.0.m0)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty:jetty-ajp 7.0.0.m0 - org.eclipse.jetty:jetty-annotations 7.0.0.m0 -...

org.cometd.java:cometd-java-demo (1.0.beta8), org.cometd.java:cometd-java-oort (1.0.beta8) +18 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.0.0.m1)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-java-demo 1.0.beta8 - org.cometd.java:cometd-java-oort 1.0.beta8 -...

org.codehaus.cargo:cargo-jetty-10-deployer (>=1.8.3, <=1.10.29), org.eclipse.jetty.demos:demos-jetty-embedded (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2021-28163 via org.eclipse.jetty:jetty-deploy (>=10.0.0, <=10.0.1)

org.eclipse.jetty:jetty-deploy MAVEN version =10.0.0, =1.8.3, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2021-28163 Source advisory: OSV:GHSA-J6QJ-J888-VVGQ...

com.github.waffle:waffle-jetty (3.0.0), com.highstreet-technologies.ops4j.pax.web:pax-web-jetty (7.3.13) +170 more potentially affected by CVE-2021-28163 via org.eclipse.jetty:jetty-deploy (>=9.4.32.v20200930, <=9.4.38.v20210224)

org.eclipse.jetty:jetty-deploy MAVEN version =9.4.32.v20200930, =1.10.4, =3.2.8, =4.2.11.hyte-42110, =4.2.11.hyte-42110, =4.2.11.hyte-42110, =4.2.11.hyte-42110, =2.4.18, =2.4.25 - no.finn.search:solr-integrationtest-support 7.0 - org.apache.activemq.examples.rest:dup-send 2.17.0 -...

org.codehaus.cargo:cargo-jetty-11-deployer (>=1.10.9, <=1.10.29), org.codehaus.cargo:cargo-jetty-11-onwards-deployer (>=1.8.3, <=1.10.8) +5 more potentially affected by CVE-2021-28163 via org.eclipse.jetty:jetty-deploy (>=11.0.0, <=11.0.1)

org.eclipse.jetty:jetty-deploy MAVEN version =11.0.0, =1.10.9, =1.8.3, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.1 Source cves: CVE-2021-28163 Source advisory: OSV:GHSA-J6QJ-J888-VVGQ...

org.codehaus.cargo:cargo-jetty-11-deployer (>=1.10.9, <=1.10.29), org.codehaus.cargo:cargo-jetty-11-onwards-deployer (>=1.8.3, <=1.10.8) +5 more potentially affected by CVE-2021-28163 via org.eclipse.jetty:jetty-deploy (>=11.0.0, <=11.0.1)

org.eclipse.jetty:jetty-deploy MAVEN version =11.0.0, =1.10.9, =1.8.3, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.1 Source cves: CVE-2021-28163 Source advisory: GHSA-J6QJ-J888-VVGQ...

com.github.waffle:waffle-jetty (3.0.0), com.highstreet-technologies.ops4j.pax.web:pax-web-jetty (7.3.13) +170 more potentially affected by CVE-2021-28163 via org.eclipse.jetty:jetty-deploy (>=9.4.32.v20200930, <=9.4.38.v20210224)

org.eclipse.jetty:jetty-deploy MAVEN version =9.4.32.v20200930, =1.10.4, =3.2.8, =4.2.11.hyte-42110, =4.2.11.hyte-42110, =4.2.11.hyte-42110, =4.2.11.hyte-42110, =2.4.18, =2.4.25 - no.finn.search:solr-integrationtest-support 7.0 - org.apache.activemq.examples.rest:dup-send 2.17.0 -...

org.codehaus.cargo:cargo-jetty-10-deployer (>=1.8.3, <=1.10.29), org.eclipse.jetty.demos:demos-jetty-embedded (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2021-28163 via org.eclipse.jetty:jetty-deploy (>=10.0.0, <=10.0.1)

org.eclipse.jetty:jetty-deploy MAVEN version =10.0.0, =1.8.3, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2021-28163 Source advisory: GHSA-J6QJ-J888-VVGQ...

Directory Traversal

jetty-deploy is vulnerable to directory traversal. The vulnerability exists through the WebAppProvider filter as it does not canonicalize files passed in from the scanner, allowing access to files outside of its working directory...

org.codehaus.cargo:cargo-jetty-10-deployer (>=1.8.3, <=1.10.29), org.eclipse.jetty.demos:demos-jetty-embedded (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2021-28163 via org.eclipse.jetty:jetty-deploy (>=10.0.0, <=10.0.1)

org.eclipse.jetty:jetty-deploy MAVEN version =10.0.0, =1.8.3, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2021-28163 Source advisory: MEND:CVE-2021-28163...

org.codehaus.cargo:cargo-jetty-11-deployer (>=1.10.9, <=1.10.29), org.codehaus.cargo:cargo-jetty-11-onwards-deployer (>=1.8.3, <=1.10.8) +5 more potentially affected by CVE-2021-28163 via org.eclipse.jetty:jetty-deploy (>=11.0.0, <=11.0.1)

org.eclipse.jetty:jetty-deploy MAVEN version =11.0.0, =1.10.9, =1.8.3, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.1 Source cves: CVE-2021-28163 Source advisory: MEND:CVE-2021-28163...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc3) +18 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.0.0.rc3)

org.eclipse.jetty:jetty-webapp MAVEN version 7.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc3 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.2.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.0.2.rc0) +22 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.0.2.rc0)

org.eclipse.jetty:jetty-webapp MAVEN version 7.0.2.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.2.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.v20110901), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.v20110901) +24 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.5.0.v20110901)

org.eclipse.jetty:jetty-webapp MAVEN version 7.5.0.v20110901 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.v20110901 -...

org.eclipse.jetty.aggregate:jetty-all (7.6.20.v20160902), org.eclipse.jetty.aggregate:jetty-all-server (7.6.20.v20160902) +19 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.6.20.v20160902)

org.eclipse.jetty:jetty-webapp MAVEN version 7.6.20.v20160902 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.20.v20160902 -...

org.eclipse.jetty:jetty-annotations (7.0.0.m0), org.eclipse.jetty:jetty-deploy (7.0.0.m0) +7 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.0.0.m0)

org.eclipse.jetty:jetty-webapp MAVEN version 7.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty:jetty-annotations 7.0.0.m0 - org.eclipse.jetty:jetty-deploy 7.0.0.m0 -...

org.cometd.java:cometd-examples-java (1.0.beta10), org.cometd.java:cometd-java-oort (1.0.beta10) +29 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.0.0.m4)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta10 - org.cometd.java:cometd-java-oort 1.0.beta10 -...

br.com.caelum.vraptor:vraptor-test (1.0.0), net.javacrumbs:mock-socket-http (>=0.1, <=0.6) +18 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.0.0.m2)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - br.com.caelum.vraptor:vraptor-test 1.0.0 - net.javacrumbs:mock-socket-http =0.1, =0.6 -...

br.com.caelum.vraptor:vraptor-test (1.0.0), net.javacrumbs:mock-socket-http (>=0.1, <=0.6) +18 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.0.0.m2)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - br.com.caelum.vraptor:vraptor-test 1.0.0 - net.javacrumbs:mock-socket-http =0.1, =0.6 -...