Jetty Security Vulnerabilities and Issues — Jetty CVE List

Lucene search

EclipseJetty

3 matches found

CVE•added 2019/11/25 10:15 p.m.•107 views

CVE-2019-17632

In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content (in text/html and text/json Content-Type) does not escape Exception messages in stacktraces included in error output.

6.1CVSS6.2AI score0.01117EPSS

CVE•added 2019/11/06 8:15 p.m.•90 views

CVE-2009-5046

JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.

6.1CVSS6AI score0.00947EPSS

CVE•added 2019/11/06 8:15 p.m.•89 views

CVE-2009-5045

Dump Servlet information leak in jetty before 6.1.22.

7.5CVSS7.3AI score0.01873EPSS