UpHeron
All vulnerabilities

Servers and applications

CVE-2020-27216

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary…

Severity
High 7.0
Published
23 Oct 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.3.29
Sources
NVD

Affected software

SoftwareAffected versions
Eclipse JettyServers and applications · cpe:a:eclipse:jetty
  • Version 11.0.0-beta2
  • Version 11.0.0-beta1
  • Version 11.0.0-alpha1
  • Version 10.0.0-beta2
All 9 release lines
  • From 1.0 before 9.3.29
  • From 9.4.0 up to 9.4.32
  • Version 10.0.0-alpha1
  • Version 10.0.0-beta0
  • Version 10.0.0-beta1
  • Version 10.0.0-beta2
  • Version 11.0.0-alpha1
  • Version 11.0.0-beta1
  • Version 11.0.0-beta2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-27216
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-27216