Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/04/18 10:19 p.m.42 views

Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies

Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with " double quote, it will continue to read the cookie string unti...

5.3CVSS5.9AI score0.013EPSS
SaveExploits0References11Affected Software1
Rows per page
Query Builder