CVE-2023-41900
1 advisory.
Maven/org.eclipse.jetty:jetty-openid CVE-2023-41900: low 3.5
Jetty's OpenId Revoked authentication allows one request
Action: Upgrade org.eclipse.jetty:jetty-openid to 9.4.52.v20230823 (9.x), 10.0.16 (10.x) or 11.0.16 (11.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.4.21 | 9.4.52.v20230823 | - |
| 10.0.0 | 10.0.16 | - |
| 11.0.0 | 11.0.16 | - |
Fixed versions
| 9.4.52.v20230823 | 10.0.16 | 11.0.16 |
Sources
- osv: GHSA-pwh8-58vv-vw48
- https://github.com/eclipse/jetty.project/security/advisories/GHSA-pwh8-58vv-vw48
- https://nvd.nist.gov/vuln/detail/CVE-2023-41900
- https://github.com/eclipse/jetty.project/pull/9528
- https://github.com/eclipse/jetty.project/pull/9660
- https://github.com/eclipse/jetty.project
- https://security.netapp.com/advisory/ntap-20231110-0004
- https://www.debian.org/security/2023/dsa-5507
CVE-2023-41900 · published · modified · JSON