Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ Eclipse Jetty up to 9.2.x/9.3.x/9.4.x HTTP 0.9 Request Cache Poisoning privilege escalation


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability, which was classified as critical, has been found in Eclipse Jetty up to 9.2.x/9.3.x/9.4.x. This issue affects an unknown code block of the component HTTP 0.9 Handler. Upgrading eliminates this vulnerability. A possible mitigation has been published 3 weeks after the disclosure of the vulnerability. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ Eclipse Jetty up to 9.2.x/9.3.x/9.4.x HTTP 0.9 Request Cache Poisoning privilege escalation


📈 73.72 Punkte
🕵️ Sicherheitslücken

🕵️ Eclipse Jetty bis 9.2.x/9.3.x/9.4.x HTTP 0.9 Request Cache Poisoning erweiterte Rechte


📈 66.09 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-10112 | Citrix Gateway 11.1/12.0/12.1 Cache Cache Poisoning request smuggling (ID 156660)


📈 41.31 Punkte
🕵️ Sicherheitslücken

🕵️ Eclipse Jetty up to 9.4.29.v20200521 Long Request HTTP Response Header Memory operation on a resource after expiration


📈 39.76 Punkte
🕵️ Sicherheitslücken

🕵️ Eclipse Jetty up to 9.3.8 on Windows Path Normalization PathResource Backslash privilege escalation


📈 39.74 Punkte
🕵️ Sicherheitslücken

🕵️ Oracle Communications Application Session Controller 3.9m0p2 Eclipse Jetty Local Privilege Escalation


📈 39.74 Punkte
🕵️ Sicherheitslücken

🕵️ Eclipse Jetty up to 9.2.x/9.3.x/9.4.x Content-Length Header privilege escalation


📈 39.74 Punkte
🕵️ Sicherheitslücken

🕵️ Eclipse Jetty up to 9.4.8 FileSessionDataStore privilege escalation


📈 39.74 Punkte
🕵️ Sicherheitslücken

🕵️ Undertow HTTP HTTP Response Cache Poisoning privilege escalation


📈 39.46 Punkte
🕵️ Sicherheitslücken

🕵️ Node.js third-party modules: Default behavior of Fastifys versioned routes can be used for cache poisoning when Fastify is used in combination with a http cache / CDN


📈 39.15 Punkte
🕵️ Sicherheitslücken

🕵️ Red Hat JBoss EAP up to 4.0.0.Beta1 JAX-RS Request Cache Poisoning privilege escalation


📈 38.87 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-22201 | Eclipse Jetty up to 9.4.53/10.0.19/11.0.19/12.0.5 HTTP/2 SSL resource consumption


📈 34.85 Punkte
🕵️ Sicherheitslücken

🕵️ Undertow up to 1.3.30/1.4.16/2.0.0.Alpha1 Incomplete Fix CVE-2017-2666 HTTP Request HTTP Poisoning privilege escalation


📈 34.28 Punkte
🕵️ Sicherheitslücken

🕵️ SilverStripe CMS up to 4.4.4 HTTP Header Cache Poisoning request smuggling


📈 33.98 Punkte
🕵️ Sicherheitslücken

🕵️ Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation


📈 33.96 Punkte
🕵️ Hacking

🕵️ Knot Resolver up to 2.4.0 DNS Resolver Cache Poisoning privilege escalation


📈 33.96 Punkte
🕵️ Sicherheitslücken

🕵️ EMC RSA Authentication Manager up to 8.3 Host Header Cache Poisoning privilege escalation


📈 33.96 Punkte
🕵️ Sicherheitslücken

🕵️ Typesetter 5.1 Password Reset Host Header Cache Poisoning privilege escalation


📈 33.96 Punkte
🕵️ Sicherheitslücken

🕵️ Apache Tomcat up to 7.0.78/8.0.44/8.5.15/9.0.0.M21 CORS Filter Cache Poisoning privilege escalation


📈 33.96 Punkte
🕵️ Sicherheitslücken

🪟 Microsoft Windows LUAFV Delayed Virtualization Cache Manager Poisoning Privilege Escalation


📈 33.96 Punkte
🪟 Windows Server

💾 Microsoft Windows LUAFV Delayed Virtualization Cache Manager Poisoning Privilege Escalation


📈 33.96 Punkte
💾 IT Security Tools

📰 Enterprise Java: Eclipse Jetty 11 ist reif für Jakarta EE 9


📈 32.11 Punkte
📰 IT Nachrichten

🕵️ CVE-2019-17632 | Eclipse Jetty Error Response cross site scripting (FEDORA-2020-4913d43d77)


📈 32.11 Punkte
🕵️ Sicherheitslücken

🕵️ Eclipse Jetty up to 9.4.36.v20210114/10.0.0/11.0.0 Accept Header algorithmic complexity


📈 32.11 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-10247 | Oracle Hospitality Guest Access 4.2.0/4.2.1 Eclipse Jetty information disclosure


📈 32.11 Punkte
🕵️ Sicherheitslücken

🕵️ Eclipse Jetty up to 9.4.34.v20201102/10.0.0.beta2/11.0.0.beta2 gzip injection


📈 32.11 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-2936 | Oracle Hospitality Reporting/Analytics 9.1.0 Eclipse Jetty information disclosure


📈 32.11 Punkte
🕵️ Sicherheitslücken

🕵️ Eclipse Jetty up to 9.4.32.v20200/10.0.0.beta2/11.0.0.beta2O on Unix temp file


📈 32.11 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-10247 | Oracle Enterprise Manager Base Platform 13.2/13.3 Eclipse Jetty information disclosure


📈 32.11 Punkte
🕵️ Sicherheitslücken

🕵️ Oracle REST Data Services 11.2.0.4/12.1.0.2/12.2.0.1/18c Eclipse Jetty Remote Code Execution


📈 32.11 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-2995 | Oracle Marketing up to 12.1.3/12.2.9 Eclipse Jetty information disclosure


📈 32.11 Punkte
🕵️ Sicherheitslücken

🕵️ Eclipse Jetty up to 9.2.26/9.3.25/9.4.15 URL cross site scripting


📈 32.11 Punkte
🕵️ Sicherheitslücken

📰 Eclipse Jetty gefährdet: Sicherheitswarnung! Mehrere IT-Schwachstellen gemeldet


📈 32.11 Punkte
📰 IT Security Nachrichten

🕵️ Eclipse Jetty up to 9.2.27/9.3.26/9.4.16 on Windows Path information disclosure


📈 32.11 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2047 | Eclipse Jetty up to 9.4.46/10.0.9/11.0.9 HttpURI input validation (GHSA-cj7v-27pg-wf7q)


📈 32.11 Punkte
🕵️ Sicherheitslücken

matomo
•