Jetty vulnerabilities
We track 1 vulnerability in Jetty products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 26, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Jetty vulnerabilities
- 7.5 High severity
jetty.project: Allocation of Resources Without Limits or Throttling
Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors