Jetty 9.4.21 < 9.4.24 Cross-Site Scripting

The version of Jetty installed on the remote host when generating default unhandled Error response content in text/html and text/json Content-Type does not escape Exception messages in stacktraces included in error output. Note that the scanner has not tested for this issue but has instead relied...

Jetty 9.4.x < 9.4.35 Information Disclosure

The version of Jetty installed on the remote host suffers from a flaw where the buffer is not correctly recycled in Gzip request inflation. This may permit an attacker to inject data into the body of the subsequent request Note that the scanner has not tested for this issue but has instead relied...

Jetty < 9.4.33 Local Temp Directory Hijacking

The version of Jetty installed on the remote host suffers from a potential race condition when creating temporary sub directories. If an co-located attacker wins the race, then they will have read/write privilege to the subdirectory used to unpack web applications, potentially leading to a local...

OESA-2021-1263 jetty security update

Jetty is a 100% Java HTTP Server and Servlet Container. This means that you\ do not need to configure and run a separate web server like Apache in order\ to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\ featured web server for static and dynamic content. Unlike...

OESA-2021-1249 jetty security update

Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server like Apache in order\ to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\ featured web server for static and dynamic content. Unlike separat...

OESA-2021-1052 jetty security update

Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server like Apache in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate...

Jetty directory traversal

Directory traversal on CGI apllications access...

Jetty < 4.2.19 HTTP Server HttpRequest.java Content-Length Handling Remote Overflow DoS

According to its banner, the remote host is running a version of Jetty that is older than 4.2.19. The version is vulnerable to a unspecified denial of service. Sarju Bhagat GPLv2 Changes by Tenable: - added CVE xrefs. - revised plugin title, changed family 6/17/09 include"compat.inc"; if...