Description

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.

Remediation

References

CVE-2015-2080

Related Vulnerabilities

WordPress Plugin Ninja Popups Multiple Vulnerabilities (4.5.3)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29522)

Oracle HTTP Server CVE-2019-2414 Vulnerability (CVE-2019-2414)

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-1280)

WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Multiple Security Bypass Vulnerabilities (8.0)

Severity

High

Classification

CVE-2015-2080 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities