Homepage

org.eclipse.jetty:jetty-annotations@9.4.19.v20190610

  • latest version

    12.1.14

  • latest non vulnerable version

    12.1.14

  • first published

    17 years ago

  • latest version published

    25 days ago

  • licenses detected

  • package registry

    View on Maven Central Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the org.eclipse.jetty:jetty-annotations package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Incorrect Authorization

    Affected versions of this package are vulnerable to Incorrect Authorization in the processing of url-pattern rules when both @ServletSecurity annotations and web.xml defined security-constraint are present on the same url-pattern, and the web.xml contains more than one url-pattern for a servlet with a security-constraint applying to only some of those definitions. An attacker can bypass intended security restrictions by targeting url-pattern definitions that are not properly constrained.

    How to fix Incorrect Authorization?

    Upgrade org.eclipse.jetty:jetty-annotations to version 9.4.65, 10.0.33, 11.0.33 or higher.

    [9.4.0-alpha0,9.4.65)[10.0.0-alpha0,10.0.33)[11.0.0-alpha0,11.0.33)
    Go back to all versions of this package