GHSA-5h9j-q6j2-253f

Source
https://github.com/advisories/GHSA-5h9j-q6j2-253f
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/12/GHSA-5h9j-q6j2-253f/GHSA-5h9j-q6j2-253f.json
Aliases
Published
2019-12-02T18:13:28Z
Modified
2024-02-16T08:16:10.159901Z
Details

In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content (in text/html and text/json Content-Type) does not escape Exception messages in stacktraces included in error output.

References

Affected packages

Maven / org.eclipse.jetty:jetty-server

Package

Name
org.eclipse.jetty:jetty-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9.4.21.v20190926
Fixed
9.4.24.v20191120

Affected versions

9.*

9.4.21.v20190926
9.4.22.v20191022
9.4.23.v20191118

Maven / org.eclipse.jetty:jetty-server

Package

Name
org.eclipse.jetty:jetty-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9.4.22.v20191022
Fixed
9.4.24.v20191120

Affected versions

9.*

9.4.22.v20191022
9.4.23.v20191118

Maven / org.eclipse.jetty:jetty-server

Package

Name
org.eclipse.jetty:jetty-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9.4.23.v20191118
Fixed
9.4.24.v20191120

Affected versions

9.*

9.4.23.v20191118