Skip to content

Vulnerabilities of Eclipse Foundation Jetty

Is your version affected?

CVE Summary Score Published
CVE-2025-1948 In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2… 7.5 High May 8, 2025
CVE-2024-13009 In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when… 7.2 High May 8, 2025
CVE-2024-8184 There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized… 5.9 Medium Oct 14, 2024
CVE-2024-6762 Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the… 3.1 Low Oct 14, 2024
CVE-2024-6763 Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine 3.7 Low Oct 14, 2024
CVE-2024-9823 There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause… 5.3 Medium Oct 14, 2024

Other Eclipse Foundation products