2443 matches found
Jetty_CVE
Ce depot n’a pas de fichier README...
CVE-2026-47889
A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...
CVE-2021-34429
CVE-2021-34429 إثبات المفهوم لـ CVE-2021-34429 - Eclipse Jetty 11.0.5 كشف الملفات الحساسة استخدام URIs المشفرة للوصول إلى الملفات داخل دليل WEB-INF إعداد بيئة الاختبار المتطلبات الأساسية: تثبيت docker و docker-compose على نظامك لتوزيعات مبنية على دبيان مثل Ubuntu و Kali Linux إلخ، استخدم الأوامر...
CVE-2026-47889
CVE-2026-47889 affects Spring Framework WebFlux applications running on the Jetty 12 Core reactive adapter . The JettyCoreServerHttpResponse component serializes response cookies without the SameSite attribute , potentially weakening cookie-based session protection. Affected versions are Spring F...
EUVD-2026-66857
A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...
jetty_9.4.31_CVE-2023-26048
Eclipse Jetty Canonical Repository 这是 Jetty 项目的官方仓库，欢迎随时 fork 并贡献代码！ 想提交补丁或拉取请求？ 请确保你已登记 Eclipse 贡献者协议（ECA）。 eclipse.org/legal/ecafaq 项目描述 Jetty 是一款轻量级、高度可扩展的基于 Java 的 Web 服务器和 Servlet 引擎。 我们的目标是以高吞吐量、低延迟的方式支持 HTTP、HTTP/2 和 WebSocket 等 Web 协议，在提供最大性能的同时，保留多年 Servlet 开发积累的易用性和兼容性。 Jetty 是一款现代的全异步...
CData Sync < 23.4.8843 - Path Traversal
A path traversal vulnerability exists in the Java version of CData Sync CData - Sync' - r...
Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control
Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....
CData API Server < 23.4.8844 - Path Traversal
A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...
Apache ActiveMQ < 5.16.5/5.17.3 - Remote Code Execution
Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...
CData Arc < 23.4.8839 - Path Traversal
A path traversal vulnerability exists in the Java version of CData Arc 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions. id: CVE-2024-31850 info: name: CData Arc 23.4.88...
Eclipse Jetty - Information Disclosure
Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224 is susceptible to improper authorization. The default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can access sensitive information regarding...
Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage
Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...
Eclipse Jetty - Information Disclosure
Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive informatio...
jetty_9.4.31_CVE-2021-34428
Eclipse Jetty Canonical Repository Это канонический репозиторий проекта Jetty, не стесняйтесь делать форк и вносить вклад! Отправляете патч или pull request? Убедитесь, что у вас есть Eclipse Contributor Agreement ECA. eclipse.org/legal/ecafaq Описание проекта Jetty — это легковесный,...
Jetty-CVE-2020-27223
Jetty-CVE-2020-27223...
CVE-2024-31848-PoC
استغلال CData داخل خوادم Jetty - CVE-2024-31848/49/50/51 - اجتياز المسار وقراءة الملفات ما هو نموذج PoC أولي لأتمتة تحليل الثغرات على الأهداف التي تشغل تطبيقات CData على خادم Jetty مدمج. الاستخدام فقط استخدم -u أو --url لتحديد هدفك، سيحاول البرنامج النصي استرداد ملف getSettings.rsb? الموجود في جم...
CVE-2019-17638-Jetty
JETTY Il progetto Jetty è un server HTTP 100% Java, un client HTTP e un contenitore di servlet della Eclipse Foundation http://www.eclipse.org/jetty/ Jetty è open source ed è distribuito con doppia licenza: Apache 2.0 e Eclipse Public License 1.0. Puoi scegliere una qualsiasi delle due licenze...