Threats tagged 'ghsa-j26w-f9rq-mr2q'

A denial of service (DoS) vulnerability exists in the DosFilter component of Eclipse Jetty. The flaw allows attackers to cause an OutOfMemory error by sending crafted requests, exhausting server memory. This affects versions of Jetty before the patched releases 9.4.54, 10.0.18, 11.0.18, and 12.0.3. The vulnerability arises from the internal request tracking mechanism in DosFilter when session tracking mode is enabled. The issue is mitigated by patches that remove support for session tracking mode in DosFilter.