Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/14 12:6 a.m.6 views

GHSA-R7P8-XQ5M-436C Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

Description as reported A security vulnerability has been identified in Jetty's JaspiAuthenticator.java. The root cause is a failure to consistently clear authentication metadata stored in ThreadLocal during certain error or incomplete authentication flows. Specifically, after a...

7.4CVSS5.8AI score0.00529EPSS
SaveExploits0References5
Rows per page
Query Builder