CVE-2019-17632CWE-79

CVE-2019-17632: vulnerability in The Eclipse Foundation Eclipse Jetty

Published · Updated

Follow this CVE+ Monitor Eclipse Jetty+ Monitor jetty9

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.9%
In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content (in text/html and text/json Content-Type) does not escape Exception messages in stacktraces included in error output.
Affected products
The Eclipse Foundation · Eclipse Jetty
Related CVEs — The Eclipse Foundation Eclipse Jetty

In the same product, most dangerous first.

CVE-2021-34429MEDIUMCVE-2021-34429EPSS 99.3%CVE-2021-28164MEDIUMCVE-2021-28164EPSS 82.4%CVE-2021-28169MEDIUMCVE-2021-28169EPSS 78.5%CVE-2020-27223MEDIUMCVE-2020-27223EPSS 78.0%CVE-2021-28165HIGHCVE-2021-28165EPSS 53.9%CVE-2017-7658—CVE-2017-7658EPSS 19.0%