CVE-2024-8184
1 advisory.
Maven/org.eclipse.jetty:jetty-server CVE-2024-8184: medium 5.9
Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks
Action: Upgrade org.eclipse.jetty:jetty-server to 9.4.56 (9.x), 10.0.24 (10.x), 11.0.24 (11.x) or 12.0.9 (12.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 12.0.0 | 12.0.9 | - |
| 10.0.0 | 10.0.24 | - |
| 11.0.0 | 11.0.24 | - |
| 9.3.12 | 9.4.56 | - |
Fixed versions
| 12.0.9 | 10.0.24 | 11.0.24 | 9.4.56 |
Sources
- osv: GHSA-g8m5-722r-8whq
- https://github.com/jetty/jetty.project/security/advisories/GHSA-g8m5-722r-8whq
- https://nvd.nist.gov/vuln/detail/CVE-2024-8184
- https://github.com/jetty/jetty.project/pull/11723
- https://github.com/jetty/jetty.project
- https://gitlab.eclipse.org/security/cve-assignement/-/issues/30
- https://lists.debian.org/debian-lts-announce/2025/04/msg00001.html
CVE-2024-8184 · published · modified · JSON