tocsin

Maven/org.eclipse.jetty:jetty-webapp CVE-2020-27216: high 7, EPSS 4.35%

Local Temp Directory Hijacking Vulnerability

Action: Upgrade org.eclipse.jetty:jetty-webapp to 9.4.33.v20201020 (9.x), 10.0.0.beta3 (10.x) or 11.0.0.beta3 (11.x) or later.

Affected

introducedfixedlast affected
09.4.33.v20201020-
10.0.0.beta110.0.0.beta3-
11.0.0.beta111.0.0.beta3-

Fixed versions

9.4.33.v2020102010.0.0.beta311.0.0.beta3

Sources

CVE-2020-27216 · published · modified · JSON