Lucene search
+L

1 matches found

OSV
OSV
added 2023/04/18 10:19 p.m.6 views

GHSA-P26G-97M4-6Q7C Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies

Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with " double quote, it will continue to read the cookie string unti...

2.4CVSS7.1AI score0.013EPSS
SaveExploits0References11
Rows per page
Query Builder