Eclipse Jetty XSS

The vulnerability of Eclipse Jetty servlet containers exists because measures to protect the structure of web pages are not taken. Exploiting this vulnerability allows a malicious actor to perform XSS attacks by using a specially crafted URL address for the DefaultServlet or ResourceHandler...

org.apache.felix:org.apache.felix.http.bundle (2.2.2), org.apache.felix:org.apache.felix.http.jetty (2.2.2) +52 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.13.v20130916)

org.eclipse.jetty:jetty-server MAVEN version 7.6.13.v20130916 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.felix:org.apache.felix.http.bundle 2.2.2 -...

com.hazelcast:hazelcast-jetty7-sessionmanager (>=1.0, <=1.0.2), org.akhikhl.gretty:gretty-runner-jetty7 (>=1.1.9, <=2.0.0) +52 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.16.v20140903)

org.eclipse.jetty:jetty-server MAVEN version 7.6.16.v20140903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.hazelcast:hazelcast-jetty7-sessionmanager =1.0, =1.1.9, =1.4.10, =1.4.14 -...

com.xuxueli:xxl-job-core (>=1.4.1, <=1.5.0), org.eclipse.jetty.aggregate:jetty-all (7.6.19.v20160209) +38 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.19.v20160209)

org.eclipse.jetty:jetty-server MAVEN version 7.6.19.v20160209 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.xuxueli:xxl-job-core =1.4.1, =1.5.0 - org.eclipse.jetty.aggregate:jetty-all...

com.yammer.dropwizard:dropwizard-client (0.2.1), com.yammer.dropwizard:dropwizard-core (0.2.1) +53 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.1.v20120215)

org.eclipse.jetty:jetty-server MAVEN version 7.6.1.v20120215 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.2.1 - com.yammer.dropwizard:dropwizard-core 0.2...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc2) +43 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.5.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc0) +34 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.1.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.1.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.6.18.v20150929), org.eclipse.jetty.aggregate:jetty-all-server (7.6.18.v20150929) +37 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.18.v20150929)

org.eclipse.jetty:jetty-server MAVEN version 7.6.18.v20150929 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.18.v20150929 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc3) +29 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.0.0.rc3)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc3 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.6.0.rc0) +45 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc1) +42 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (8.1.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.6.20.v20160902), org.eclipse.jetty.aggregate:jetty-all-server (7.6.20.v20160902) +36 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.6.20.v20160902)

org.eclipse.jetty:jetty-server MAVEN version 7.6.20.v20160902 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.20.v20160902 -...

com.hazelcast:hazelcast-jetty7-sessionmanager (>=1.0, <=1.0.2), org.akhikhl.gretty:gretty-runner-jetty7 (>=1.1.9, <=2.0.0) +52 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.6.16.v20140903)

org.eclipse.jetty:jetty-server MAVEN version 7.6.16.v20140903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.hazelcast:hazelcast-jetty7-sessionmanager =1.0, =1.1.9, =1.4.10, =1.4.14 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc0) +22 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.0.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc1) +22 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.0.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc6), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc6) +32 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.0.0.rc6)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc6 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc6 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc1) +33 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.1.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.cometd.java:cometd-java-examples (2.4.0.rc3), org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc5) +46 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.6.0.rc5)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-java-examples 2.4.0.rc3 - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc5), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc5) +43 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (8.1.0.rc5)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc5 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc2) +43 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.5.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...