CVE-2024-13009
HIGHEclipse Jetty <9.4.56 - Buffer Overflow
Title source: llmDescription
In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests.
Scores
CVSS v3
7.2
EPSS
0.0055
EPSS Percentile
67.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Classification
CWE
CWE-404
Status
published
Affected Products (2)
eclipse/jetty
< 9.4.57
org.eclipse.jetty/jetty-server
< 9.4.57.v20241219Maven
Timeline
Published
May 08, 2025
Tracked Since
Feb 18, 2026