VDB
GHSA-58qw-p7qm-5rvh
GHSA-58qw-p7qm-5rvh
PUBLISHED
CVSS 3.9000000953674316 LOW
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
Risk Scores
CVSS 3.1
3.9000000953674316
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | hive | 0 |
| wolfi | druid | 0 |
| chainguard | apache-hop-fips | 0 |
| chainguard | spark-3.5 | 0 |
| wolfi | jenkins | * |
| chainguard | apache-hop | 0 |
| chainguard | druid | 0 |
| chainguard | jenkins | * |
| chainguard | hadoop-fips-3.3.6 | 0 |
| Maven | org.eclipse.jetty:jetty-xml | 10.0.1, 10.0.10, 10.0.11 |
Timeline
- Jul 10, 2023 CVE Published
- Feb 10, 2026 CVE Updated
References
- GitHub Advisory GHSA-58qw-p7qm-5rvh vendor-advisory
- https://github.com/eclipse/jetty.project package
- https://github.com/eclipse/jetty.project/security/advisories/GHSA-58qw-p7qm-5rvh url
- https://github.com/jetty/jetty.project/security/advisories/GHSA-58qw-p7qm-5rvh url
- https://github.com/eclipse/jetty.project/pull/10067 fix
- https://github.com/eclipse/jetty.project/releases/tag/jetty-12.0.0 fix
- https://github.com/eclipse/jetty.project/releases/tag/jetty-10.0.16 fix
- https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.16 fix
- https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.52.v20230823 fix