Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse:jetty:11.0.0:beta3:*:*:*:*:*:*

part: a version: 11.0.0 update: beta3

VendorEclipse (fa988180-604e-5c1f-93ea-65b5297000fc)
ProductJetty (218f4e28-2142-514f-b269-fe7d12f8e0be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:eclipse/jetty purl2cpe 2026-06-01 10:15:03.376659
pkg:github/eclipse/jetty.project purl2cpe 2026-06-01 10:15:03.376660

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28163 vulnerable 2026-06-03 14:44:17.310025 Details available
LOW (2.7)
In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that might be in that directory.
Published: 2021-04-01T14:20:13.000Z
Updated: 2024-08-03T21:40:12.280Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.