CVE-2019-17632
25.11.2019, 22:15
In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content (in text/html and text/json Content-Type) does not escape Exception messages in stacktraces included in error output.
| Vendor | Product | Version |
|---|---|---|
| eclipse | jetty | 9.4.21:20190926 |
| eclipse | jetty | 9.4.22:20191022 |
| eclipse | jetty | 9.4.23:20191118 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| jetty |
| ||||||||||||||||||||||||||||
| jetty8 |
| ||||||||||||||||||||||||||||
| jetty9 |
|
References