Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-6762

Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the server’s memory.

Published

2024-10-14T16:15:03.930

Last Modified

2024-11-08T21:29:51.237

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 3.1 (LOW)

Weaknesses

Type: Secondary
CWE-400
Type: Primary
CWE-770

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	eclipse	jetty	< 10.0.18	Yes
Application	eclipse	jetty	< 11.0.18	Yes
Application	eclipse	jetty	< 12.0.4	Yes

References

https://github.com/jetty/jetty.project/pull/10755 Patch ([email protected])
https://github.com/jetty/jetty.project/pull/10756 Patch ([email protected])
https://github.com/jetty/jetty.project/pull/9715 Patch ([email protected])
https://github.com/jetty/jetty.project/pull/9716 Patch ([email protected])
https://github.com/jetty/jetty.project/security/advisories/GHSA-r7m4-f9h5-gr79 Vendor Advisory ([email protected])
https://gitlab.eclipse.org/security/cve-assignement/-/issues/24 Issue Tracking, Vendor Advisory ([email protected])