org.eclipse.jetty:jetty-servlets@9.4.46.v20220331 vulnerabilities
latest version
11.0.24
latest non vulnerable version
first published
15 years ago
latest version published
4 months ago
licenses detected
- (Apache-2.0 OR EPL-1.0)[7.0.0.M0,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.eclipse.jetty:jetty-servlets package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.eclipse.jetty:jetty-servlets is an Utility Servlets from Jetty Affected versions of this package are vulnerable to Denial of Service (DoS) via the Note: This is only exploitable if the server does not have session passivation or an aggressive session inactivation timeout configured. How to fix Denial of Service (DoS)? Upgrade | [9.0.0.M0,9.4.54)[10.0.0,10.0.18)[11.0.0,11.0.18) |
org.eclipse.jetty:jetty-servlets is an Utility Servlets from Jetty Affected versions of this package are vulnerable to Arbitrary Code Execution. If a user sends a request to a Impact: This behavior may bypass alias checks, and it may cause other unintended behaviors if a command prefix is configured. Note: In Jetty 9.x, 10.x, and 11.x the In Jetty 12 (all environments) the How to fix Arbitrary Code Execution? Upgrade | [9.0.0,9.4.52)[10.0.0,10.0.16)[11.0.0,11.0.16) |