Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse:jetty:9.3.0:m1:*:*:*:*:*:*

part: a version: 9.3.0 update: m1

VendorEclipse (fa988180-604e-5c1f-93ea-65b5297000fc)
ProductJetty (218f4e28-2142-514f-b269-fe7d12f8e0be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:eclipse/jetty purl2cpe 2026-06-01 10:15:03.513094
pkg:github/eclipse/jetty.project purl2cpe 2026-06-01 10:15:03.513096

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4800 vulnerable 2026-06-03 14:35:53.264646 Details available
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
Published: 2017-04-13T14:00:00.000Z
Updated: 2024-08-06T00:39:26.308Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2080 vulnerable 2026-06-03 14:34:41.272090 Details available
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
Published: 2016-10-07T14:00:00.000Z
Updated: 2024-08-06T05:02:43.318Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.