com.pacificwebconsulting.core:core-microservice (>=2.0.0, <=3.0.10), com.pacificwebconsulting.runner:runner-microservice (>=1.0.0, <=1.0.2) +68 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.2.0.v20101020)

org.eclipse.jetty:jetty-http MAVEN version 7.2.0.v20101020 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - com.pacificwebconsulting.core:core-microservice =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.6, =2.26,...

org.apache.felix:org.apache.felix.http.jetty (2.2.1), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.4.4, <=1.4.5) +67 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.6.12.v20130726)

org.eclipse.jetty:jetty-http MAVEN version 7.6.12.v20130726 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.apache.felix:org.apache.felix.http.jetty 2.2.1 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc0) +26 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.rc0)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc2) +52 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (8.1.0.rc2)

org.eclipse.jetty:jetty-http MAVEN version 8.1.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...

com.atomikos:transactions-tcc-rest (>=4.0.0, <=4.0.3), com.github.searls:jasmine-maven-plugin (>=1.0.2-beta-3, <=1.2.0.0) +132 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.4.2.v20110526)

org.eclipse.jetty:jetty-http MAVEN version 7.4.2.v20110526 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - com.atomikos:transactions-tcc-rest =4.0.0, =1.0.2-beta-3, =1.0.1, =1.0.4, =1.0.1, =1.0.7,...

com.bolyartech.ezlambda:ezlambda-server (1.1.1), com.bolyartech.forge.server:forge-server-jetty (>=9.1.3, <=10.0.2) +241 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (>=10.0.0, <=10.0.9)

org.eclipse.jetty:jetty-http MAVEN version =10.0.0, =9.1.3, =2.33, =2.33, =2.33, =1.3.6, =1.0.0, =1.0.0, =1.0.0, =4.0.0-beta.1, =4.0.0-beta.1, =4.1.0 and more Source cves: CVE-2022-2047 Source advisory: OSV:GHSA-CJ7V-27PG-WF7Q...

ai.h2o:h2o-algos (>=3.0.1.2, <=3.22.0.5), ai.h2o:h2o-app (>=3.0.1.2, <=3.22.0.5) +162 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (8.1.17.v20150415)

org.eclipse.jetty:jetty-http MAVEN version 8.1.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - ai.h2o:h2o-algos =3.0.1.2, =3.0.1.2, =3.12.0.1, =3.8.2.4, =3.0.1.2, =3.14.0.7, =3.16.0.1,...

be.tomcools:dropwizard-websocket-jsr356-bundle (4.0.0-beta.1), ch.exense.rtm:rtm (3.0.0) +399 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (>=11.0.0, <=11.0.9)

org.eclipse.jetty:jetty-http MAVEN version =11.0.0, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.23.0, =3.20.0, =3.20.0, =3.20.0, =3.22.0, =3.25.5 and more Source cves: CVE-2022-2047 Source advisory: MEND:CVE-2022-2047...

Information Disclosure

jetty-http is vulnerable to information disclosure. Insecure parsing of encoded characters allow an attacker to bypass security constraints and potentially access private files within the WEB-INF directory...

Denial Of Service (DoS)

Jetty HTTP Server is vulnerable to denial of service. HTTP requests are not properly validated, which allows for a remote attacker to cause the application to crash via a large value in the Content-Length header...

HTTP Request Smuggling

jetty-http is vulnerable to http request smuggling. The application uses a parser that is too tolerant with deviations from the HTTP header specifications, allowing a malicious user cause a http request smuggling attack through the bad length parsing...

Moderate: Red Hat Security Advisory: Fuse MQ Enterprise 7.1.0 update

Fuse MQ Enterprise 7.1.0, which fixes one security issue, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, whi...

[SECURITY] Fedora 16 Update: jetty-6.1.26-8.fc16

Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server like Apache in order to use java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate...

CVE-2011-4404

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...

CVE-2011-4404

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...

Jetty HTTP server directory traversal vulnerability

Overview A vulnerability in the Jetty HTTP server could allow a remote attacker to gain access to files outside of the normal document tree. Description Jetty provides an HTTP server, HTTP client, and javax.servlet container. An error in the way canonical paths are interpreted in the HTTP server'...

[SECURITY] Fedora 9 Update: jetty-5.1.14-1jpp.2.fc9

Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server like Apache in order to use java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate...

CVE-2004-2478

Unspecified vulnerability in Jetty HTTP Server, as used in 1 IBM Trading Partner Interchange before 4.2.4, 2 CA Unicenter Web Services Distributed Management WSDM before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2004-2478

The CVE-2004-2478 entry concerns Jetty HTTP Server in affected products (IBM Trading Partner Interchange &lt; 4.2.4; CA Unicenter Web Services Distributed Management

CVE-2004-2478: Undefined Security Weakness

Unspecified vulnerability in Jetty HTTP Server, as used in 1 IBM Trading Partner Interchange before 4.2.4, 2 CA Unicenter Web Services Distributed Management WSDM before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. dot dot in the URL...