Skip to content
Eclipse jetty.project
-
CVE-2023-36478
High 7.5
HTTP/2 HPACK integer overflow and buffer allocation
4.8%
-
CVE-2023-41900
Low 3.5
Jetty's OpenId Revoked authentication allows one request
0.9%
-
CVE-2023-40167
Medium 5.3
Jetty accepts "+" prefixed value in Content-Length
1.3%
-
CVE-2023-36479
Low 3.5
Jetty vulnerable to errant command quoting in CGI Servlet
1.2%
-
CVE-2023-26049
Low 2.4
Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty
1.3%
-
CVE-2023-26048
Medium 5.3
OutOfMemoryError for large multipart without filename in Eclipse Jetty
3.4%