Homepage

org.mortbay.jetty:cometd@6.0.0rc3 vulnerabilities

  • latest version

    6.1.11

  • latest non vulnerable version

    6.1.11

  • first published

    18 years ago

  • latest version published

    16 years ago

  • licenses detected

  • package manager

    View on Maven Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the org.mortbay.jetty:cometd package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Use of Insufficiently Random Values

    Affected versions of this package are vulnerable to Use of Insufficiently Random Values due to the use of java.util.random for generating session identifiers. An attacker can guess a session identifier through brute force attacks, bypass authentication requirements, and possibly conduct cross-site request forgery attacks.

    How to fix Use of Insufficiently Random Values?

    Upgrade org.mortbay.jetty:cometd to version 6.0.2, 6.1.0pre3 or higher.

    [,6.0.2)[6.1.0pre1,6.1.0pre3)
    Go back to all versions of this package