Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-27223 PoC — Eclipse Jetty 资源管理错误漏洞

Source
https://github.com/hshivhare67/Jetty_v9.4.31_CVE-2020-27223
Associated Vulnerability
Title:Eclipse Jetty 资源管理错误漏洞 (CVE-2020-27223)
Description:In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.
File Snapshot

 [4.0K]  /data/pocs/aca50f67d5091ccd397371b6ab9b27280efbf7ee
└── [7.4K]  QuotedQualityCSV.java

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →