VDB
BDU%3A2023-05675
BDU%3A2023-05675
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функций HttpServletRequest.getParameter() иHttpServletRequest.getParts() контейнера сервлетов Eclipse Jetty, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Eclipse Foundation, АО "НППКТ", Gradle Inc. | Red Hat Enterprise Linux, JBoss Enterprise Application Platform, Red Hat Single Sign-On, JBoss A-MQ Streaming, Red Hat Integration Service Registry, Red Hat Integration Camel Quarkus, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Satellite, OpenShift Developer Tools and Services, Red Hat Integration Camel for Spring Boot, Migration Toolkit for Applications, OpenShift Serverless, Migration Toolkit for Runtimes, Jetty, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), Gradle |
Timeline
- Sep 15, 2023 CVE Published
- Feb 10, 2026 CVE Updated
References
- https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8 url
- https://access.redhat.com/security/cve/cve-2023-26048 url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.9/ url
- https://github.com/eclipse/jetty.project/pull/9345 advisory
- https://github.com/eclipse/jetty.project/pull/9344 advisory
- https://github.com/eclipse/jetty.project/issues/9076 advisory