Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2080)

Description

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.

Remediation

References

CVE-2015-2080

Related Vulnerabilities

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-7833)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1754)

Drupal Core 5.x Local File Inclusion (5.0 - 5.15)

Joomla! Core 3.x.x Cross-Site Scripting (3.1.2 - 3.8.7)

WordPress Plugin YITH WooCommerce Compare PHP Object Injection (2.0.9)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N