{"action":"Upgrade org.eclipse.jetty:jetty-servlets to 10.0.18 (10.x), 11.0.18 (11.x) or 12.0.4 (12.x) or later.","affected":[{"fixed":"10.0.18","introduced":"10.0.0"},{"fixed":"11.0.18","introduced":"11.0.0"},{"fixed":"12.0.4","introduced":"12.0.0"}],"component":"org.eclipse.jetty:jetty-servlets","cve_ids":["CVE-2024-6762"],"ecosystem":"Maven","epss":0.00942,"exploited":false,"fixed_versions":["10.0.18","11.0.18","12.0.4"],"ghsa_id":"GHSA-r7m4-f9h5-gr79","id":"tcs_01M5N9B69H58CFDF8M3MEAP7TP","modified_at":"2025-11-03T23:16:52.870380Z","published_at":"2024-10-14T21:07:29Z","references":["https://osv.dev/vulnerability/GHSA-r7m4-f9h5-gr79","https://github.com/jetty/jetty.project/security/advisories/GHSA-r7m4-f9h5-gr79","https://nvd.nist.gov/vuln/detail/CVE-2024-6762","https://github.com/jetty/jetty.project/pull/10755","https://github.com/jetty/jetty.project/pull/10756","https://github.com/jetty/jetty.project/pull/9715","https://github.com/jetty/jetty.project/pull/9716","https://github.com/jetty/jetty.project","https://gitlab.eclipse.org/security/cve-assignement/-/issues/24","https://lists.debian.org/debian-lts-announce/2025/04/msg00001.html"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"GHSA-r7m4-f9h5-gr79","url":"https://osv.dev/vulnerability/GHSA-r7m4-f9h5-gr79"}],"summary":"Eclipse Jetty's PushSessionCacheFilter can cause remote DoS attacks"}