CVE-2024-13009
Eclipse Jetty GZIP buffer release
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Eclipse Jetty GZIP buffer release
In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests.
Reserved 2024-12-28 | Published 2025-05-08 | Updated 2025-05-08 | Assigner eclipseCWE-404 Improper Resource Shutdown or Release
gitlab.eclipse.org/security/cve-assignement/-/issues/48
github.com/...roject/security/advisories/GHSA-q4rv-gq96-w7c5
Support options
