2443 matches found
CVE-2026-47889
A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...
CVE-2021-34429
CVE-2021-34429 CVE-2021-34429 の PoC - Eclipse Jetty 11.0.5 機密ファイル開示 エンコードされたURIを使用してWEB-INFディレクトリ内のファイルにアクセスする テスト環境のセットアップ 前提条件: システムにdockerとdocker-composeをインストールする Debianベースのディストリビューション（例: Ubuntu, Kali Linuxなど）では、以下のコマンドを使用してください。 root@kitploit: apt install docker.io apt install docker-compose...
CVE-2026-47889
A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...
EUVD-2026-66857
A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...
jetty_9.4.31_CVE-2023-26048
Eclipse Jetty Canonical Repository 这是 Jetty 项目的官方仓库，欢迎随时 fork 并贡献代码！ 想提交补丁或拉取请求？ 请确保你已登记 Eclipse 贡献者协议（ECA）。 eclipse.org/legal/ecafaq 项目描述 Jetty 是一款轻量级、高度可扩展的基于 Java 的 Web 服务器和 Servlet 引擎。 我们的目标是以高吞吐量、低延迟的方式支持 HTTP、HTTP/2 和 WebSocket 等 Web 协议，在提供最大性能的同时，保留多年 Servlet 开发积累的易用性和兼容性。 Jetty 是一款现代的全异步...
CData Sync < 23.4.8843 - Path Traversal
A path traversal vulnerability exists in the Java version of CData Sync CData - Sync' - r...
Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control
Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....
CData API Server < 23.4.8844 - Path Traversal
A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...
Apache ActiveMQ < 5.16.5/5.17.3 - Remote Code Execution
Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...
CData Arc < 23.4.8839 - Path Traversal
A path traversal vulnerability exists in the Java version of CData Arc 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions. id: CVE-2024-31850 info: name: CData Arc 23.4.88...
Eclipse Jetty - Information Disclosure
Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224 is susceptible to improper authorization. The default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can access sensitive information regarding...
Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage
Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...
Eclipse Jetty - Information Disclosure
Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive informatio...
CVE-2024-31848-PoC
Jettyサーバー内のCDataの悪用 - CVE-2024-31848/49/50/51 - ファイルパストラバーサル&ファイル読み取り 概要 組み込みJettyサーバー上でCDataアプリケーションを実行しているターゲットに対する脆弱性分析を自動化するためのプロトタイプPoCです。 使用方法 ターゲットを指定するには、-uまたは--urlを使うだけです。スクリプトは、すべてのCDataインスタンスに存在するgetSettings.rsb?ファイルの取得を試みます。 例 注記 将来的に、より多くのエラーハンドリングが追加される予定です。 免責事項...
jetty_9.4.31_CVE-2021-34428
Repositório Canônico do Eclipse Jetty Este é o repositório canônico do projeto Jetty, sinta-se à vontade para fazer um fork e contribuir agora! Enviando um patch ou pull request? Certifique-se de ter um Eclipse Contributor Agreement ECA em arquivo. eclipse.org/legal/ecafaq Descrição do projeto O...
CVE-2019-17638-Jetty
JETTY Il progetto Jetty è un server HTTP 100% Java, un client HTTP e un contenitore di servlet della Eclipse Foundation http://www.eclipse.org/jetty/ Jetty è open source ed è distribuito con doppia licenza: Apache 2.0 e Eclipse Public License 1.0. Puoi scegliere una qualsiasi delle due licenze...
-jettyCVE-2021-28164-
-jettyCVE-2021-28164- jetty /CVE-2021-28164/ Analyse und Ergebnisse...
Jetty-v9.4.31_CVE-2023-40167
Questo repository non contiene un README...
Eclipse Jetty ConcatServlet - Information Disclosure
Eclipse Jetty through 9.4.40, through 10.0.2, and through 11.0.2 is susceptible to information disclosure. Requests to the ConcatServlet with a doubly encoded path can access protected resources within the WEB-INF directory, thus enabling an attacker to potentially obtain sensitive information,...