CVE-2023-5115 Jetty HTTP/2 MadeYouReset DoS Vulnerability

github.com 2025-08-23查看中文 →

Security AdvisoryCVE-2023-5115HighEclipse Jetty

Affected:

org.eclipse.jetty.http2:http2-common >=9.3.0, <=9.4.57
org.eclipse.jetty.http2:http2-common >=10.0.0, <=10.0.25
org.eclipse.jetty.http2:http2-common >=11.0.0, <=11.0.25
org.eclipse.jetty.http2:jetty-http2-common >=12.0.0, <=12.0.24
org.eclipse.jetty.http2:jetty-http2-common >=12.1.0-alpha0, <=12.1.0-beta2

Fixed in:

9.4.58
10.0.26
11.0.26
12.0.25
12.1.0-beta3

Referenced CVEs: CVE-2025-5115

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Wazuh authd Unauthenticated Path Traversal via Agent Group Name (CVE-2025-39359) and PoC 2026-07-17 Heap buffer overflow in Wazuh wazuh-analysisd causing unauthenticated DoS 2026-07-17 h2o HTTP/2 Header Bomb DoS Vulnerability Fix 2026-07-17 Wazuh Unauthenticated Cluster Remote DoS Vulnerability with PoC 2026-07-17 h2o HTTP Server path length miscalculation leading to buffer overflow vulnerability 2026-07-17

Offline Archive

Offline screenshot & PDF are Pro-exclusive