tocsin

Debian/jetty9: medium 5.3

Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header fiel

Action: Upgrade jetty9 to 9.4.50-4+deb12u1 or later.

Affected

introducedfixedlast affected
09.4.50-4+deb12u1-

Fixed versions

9.4.50-4+deb12u1

Sources

published · modified · JSON