Servers and applications
CVE-2024-13009
In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests.
- Severity
- High 7.2
- Published
- 8 May 2025
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 9.4.57
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Eclipse JettyServers and applications · cpe:a:eclipse:jetty |
|