Approved changes feed: RSS · Atom

cpe:2.3:a:mortbay:jetty:7.0.0:pre1:*:*:*:*:*:*

part: a version: 7.0.0 update: pre1

VendorMortbay (65e537d6-e55b-57f2-a298-b13e77c4f48e)
ProductJetty (dd70629b-3849-54ad-8968-4da06363ee77)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:eclipse/jetty purl2cpe 2026-06-01 10:15:08.775331
pkg:github/eclipse/jetty.project purl2cpe 2026-06-01 10:15:08.775332
pkg:maven/org.apache.jetty/jetty purl2cpe 2026-06-01 10:15:08.775334

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4461 vulnerable 2026-06-08 04:59:31.526990 Details available
Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Published: 2011-12-30T01:00:00.000Z
Updated: 2024-08-07T00:09:18.436Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1523 vulnerable 2026-06-08 04:51:23.724284 Details available
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
Published: 2009-05-05T17:00:00.000Z
Updated: 2024-08-07T05:13:25.642Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.