7.5
Élevée
CVE-2024-7708 For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak
Description
For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the network is slow can leak.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Eclipse Jetty 11.0 | 11.0.7 → < 11.0.23 | 11.0.23 |
| Eclipse Jetty 10.0 | 10.0.7 → < 10.0.23 | 10.0.23 |
Autres CVE de Eclipse Jetty
Les 16 CVE de Eclipse Jetty →
CVE-2026-18661
In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec…
8.8
Élevée
CVE-2026-77711
When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy…
8.2
Élevée
CVE-2026-76184
In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to…
8.2
Élevée
CVE-2026-76182
In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such…
6.9
Moyenne