Home > Vulnerability Database > CVE-2024-6762

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2024-6762

Good to know:

Date: October 14, 2024

Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the server’s memory.

Language: Java

Severity Score

3.1

Related Resources (10)

Url: https://github.com/jetty/jetty.project/pull/10756

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-6762

Url: https://github.com/jetty/jetty.project/security/advisories/GHSA-r7m4-f9h5-gr79

Url: https://security-tracker.debian.org/tracker/CVE-2024-6762

Url: https://github.com/jetty/jetty.project

Url: https://github.com/jetty/jetty.project/pull/9715

Url: https://gitlab.eclipse.org/security/cve-assignement/-/issues/24

Url: https://github.com/jetty/jetty.project/pull/10755

Url: https://github.com/jetty/jetty.project/pull/9716

Url: https://www.mend.io/vulnerability-database/CVE-2024-6762

Severity Score

3.1

Weakness Type (CWE)

Uncontrolled Resource Consumption

CWE-400

Allocation of Resources Without Limits or Throttling

CWE-770

Top Fix

Upgrade Version

Upgrade to version org.eclipse.jetty:jetty-servlets:11.0.18;org.eclipse.jetty:jetty-servlets:10.0.18

CVSS v3.1

Base Score:	3.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW

Do you need more information?

Contact Us