VDB
BDU%3A2023-05682
BDU%3A2023-05682
PUBLISHED
CVSS 5 MEDIUM
Уязвимость контейнера сервлетов Eclipse Jetty, связанная с ошибками проверки синтаксической корректности ввода, позволяющая нарушителю внедрить одни cookies внутрь других и повлиять на их обработку
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Eclipse Foundation, АО "НППКТ", Gradle Inc. | Red Hat Enterprise Linux, JBoss Enterprise Application Platform, Red Hat Single Sign-On, Red Hat build of Quarkus, Red Hat Integration Camel K, Red Hat Integration Service Registry, Red Hat Integration Camel Quarkus, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Satellite, OpenShift Developer Tools and Services, Migration Toolkit for Applications, OpenShift Serverless, Migration Toolkit for Runtimes, Red Hat JBoss A-MQ Streams, Jetty, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), Gradle |
Timeline
- Sep 15, 2023 CVE Published
- Feb 10, 2026 CVE Updated
References
- https://www.rfc-editor.org/rfc/rfc2965 url
- https://github.com/eclipse/jetty.project/pull/9352 url
- https://www.oracle.com/security-alerts/cpujul2023.html url
- https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c url
- https://www.rfc-editor.org/rfc/rfc6265 url
- https://github.com/eclipse/jetty.project/pull/9339 url
- https://security.netapp.com/advisory/ntap-20230526-0001/ url
- https://access.redhat.com/security/cve/CVE-2023-26049 url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.9/ url