{"schemaVersion":3,"id":"CVE-2021-34429","aliases":["SUSE-SU-2021:2838-1","UBUNTU-CVE-2021-34429","DEBIAN-CVE-2021-34429","openSUSE-SU-2021:2838-1","GHSA-vjv5-gp2w-65vm"],"status":"published","duplicateOf":null,"title":null,"description":"For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.","dates":{"published":"2021-07-15T17:00:10.000Z","modified":"2024-08-04T00:12:50.169Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.99298,"percentile":0.99939,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.99298},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.99298,"percentile":0.99939}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.99298,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.99298,"percentile":0.99939}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_ECLIPSE_JETTY.PROJECT","name":"Jetty.Project","source":"github","url":"https://github.com/eclipse/jetty.project/blob/jetty-9.2.x/advisories/2015-02-24-httpparser-error-buffer-bleed.md","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"50478","name":"Eclipse Jetty 11.0.5 - Sensitive File Disclosure","source":"exploit-database","url":"https://www.exploit-db.com/exploits/50478","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":null,"platforms":["java"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"webapps","platform":"java","file":"exploits/java/webapps/50478.txt","codes":["CVE-2021-34429"]},"metasploit":null},{"id":"MSF_AUXILIARY_GATHER_JETTY_WEB_INF_DISCLOSURE","name":"Jetty WEB-INF File Disclosure","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/jetty_web_inf_disclosure.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"auxiliary/gather/jetty_web_inf_disclosure","rank":"300","rankName":"normal","postAuth":false,"check":true,"stability":["crash-safe"],"sideEffects":["ioc-in-logs"],"reliability":[]}}],"exploitCount":3,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"},{"id":"CWE-551","name":"Incorrect Behavior Order: Authorization Before Parsing and Canonicalization","description":"If a web server does not fully parse requested URLs before it examines them for authorization, it may be possible for an attacker to bypass authorization protection.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/551.html"}],"affected":[{"vendor":"debian","product":"jetty9","name":"jetty9","label":"jetty9","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/jetty9","purlType":"deb","versions":[{"text":"< 9.4.39-3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.39-3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"jetty9","name":"jetty9","label":"jetty9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/jetty9","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"eclipse","product":"jetty","name":"jetty","label":"jetty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 9.4.37, < 9.4.43","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0.1, < 10.0.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0.1, < 11.0.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.4.37, < 9.4.43 | ≥ 10.0.1, < 10.0.6 | ≥ 11.0.1, < 11.0.6","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"eclipse-jetty","label":"Eclipse Jetty","category":"server-app"}},"hubHref":"/vendor/eclipse/jetty"},{"vendor":"org.eclipse.jetty","product":"jetty-webapp","name":"org.eclipse.jetty:jetty-webapp","label":"jetty-webapp","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.jetty/jetty-webapp","purlType":"maven","versions":[{"text":"≥ 9.4.37, < 9.4.43","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0.1, < 10.0.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0.1, < 11.0.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.4.37, < 9.4.43 | ≥ 10.0.1, < 10.0.6 | ≥ 11.0.1, < 11.0.6","eol":null,"hubHref":null},{"vendor":"netapp","product":"e-series_santricity_os_controller","name":"e-series santricity os controller","label":"e-series_santricity_os_controller","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 11.0, ≤ 11.70.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 11.0, ≤ 11.70.1","eol":null,"hubHref":"/vendor/netapp/e-series_santricity_os_controller"},{"vendor":"netapp","product":"e-series_santricity_web_services","name":"e-series santricity web services","label":"e-series_santricity_web_services","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/e-series_santricity_web_services"},{"vendor":"netapp","product":"element_plug-in_for_vcenter_server","name":"element plug-in for vcenter server","label":"element_plug-in_for_vcenter_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/element_plug-in_for_vcenter_server"},{"vendor":"netapp","product":"hci_management_node","name":"hci management node","label":"hci_management_node","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/hci_management_node"},{"vendor":"netapp","product":"snap_creator_framework","name":"snap creator framework","label":"snap_creator_framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/snap_creator_framework"},{"vendor":"netapp","product":"snapcenter_plug-in","name":"snapcenter plug-in","label":"snapcenter_plug-in","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/snapcenter_plug-in"},{"vendor":"netapp","product":"solidfire","name":"solidfire","label":"solidfire","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/solidfire"},{"vendor":"oracle","product":"autovue_for_agile_product_lifecycle_management","name":"autovue for agile product lifecycle management","label":"autovue_for_agile_product_lifecycle_management","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"21.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"21.0.2","eol":null,"hubHref":"/vendor/oracle/autovue_for_agile_product_lifecycle_management"},{"vendor":"oracle","product":"communications_cloud_native_core_binding_support_function","name":"communications cloud native core binding support function","label":"communications_cloud_native_core_binding_support_function","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.10.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.10.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_binding_support_function"},{"vendor":"oracle","product":"communications_cloud_native_core_security_edge_protection_proxy","name":"communications cloud native core security edge protection proxy","label":"communications_cloud_native_core_security_edge_protection_proxy","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_security_edge_protection_proxy"},{"vendor":"oracle","product":"communications_cloud_native_core_service_communication_proxy","name":"communications cloud native core service communication proxy","label":"communications_cloud_native_core_service_communication_proxy","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.14.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.14.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_service_communication_proxy"},{"vendor":"oracle","product":"communications_cloud_native_core_unified_data_repository","name":"communications cloud native core unified data repository","label":"communications_cloud_native_core_unified_data_repository","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.14.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.14.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_unified_data_repository"},{"vendor":"oracle","product":"communications_diameter_signaling_router","name":"communications diameter signaling router","label":"communications_diameter_signaling_router","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.0.0.0, ≤ 8.5.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.0.0.0, ≤ 8.5.0.2","eol":null,"hubHref":"/vendor/oracle/communications_diameter_signaling_router"},{"vendor":"oracle","product":"financial_services_crime_and_compliance_management_studio","name":"financial services crime and compliance management studio","label":"financial_services_crime_and_compliance_management_studio","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8.0.8.2.0","noFixRecorded":false,"fixedIn":null},{"text":"8.0.8.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0.8.2.0 | 8.0.8.3.0","eol":null,"hubHref":"/vendor/oracle/financial_services_crime_and_compliance_management_studio"},{"vendor":"oracle","product":"rest_data_services","name":"rest data services","label":"rest_data_services","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.1.1","eol":null,"hubHref":"/vendor/oracle/rest_data_services"},{"vendor":"oracle","product":"retail_eftlink","name":"retail eftlink","label":"retail_eftlink","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"20.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"20.0.1","eol":null,"hubHref":"/vendor/oracle/retail_eftlink"},{"vendor":"oracle","product":"stream_analytics","name":"stream analytics","label":"stream_analytics","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 19.1.0.0.6.4","noFixRecorded":false,"fixedIn":null},{"text":"19c","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.0.0.6.4 | 19c","eol":null,"hubHref":"/vendor/oracle/stream_analytics"},{"vendor":"opensuse","product":"jetty-minimal&distro=openSUSE Leap 15.3","name":"jetty-minimal","label":"jetty-minimal&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/jetty-minimal&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 9.4.43-3.12.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.43-3.12.2","eol":null,"hubHref":null},{"vendor":"opensuse","product":"jetty-websocket&distro=openSUSE Leap 15.3","name":"jetty-websocket","label":"jetty-websocket&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/jetty-websocket&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 9.4.43-3.12.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.43-3.12.2","eol":null,"hubHref":null},{"vendor":"suse","product":"jetty-minimal&distro=SUSE Linux Enterprise Module for Development Tools 15 SP2","name":"jetty-minimal","label":"jetty-minimal&distro=SUSE Linux Enterprise Module for Development Tools 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/jetty-minimal&distro=SUSE Linux Enterprise Module for Development Tools 15 SP2","purlType":"rpm","versions":[{"text":"< 9.4.43-3.12.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.43-3.12.2","eol":null,"hubHref":null},{"vendor":"suse","product":"jetty-minimal&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3","name":"jetty-minimal","label":"jetty-minimal&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/jetty-minimal&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3","purlType":"rpm","versions":[{"text":"< 9.4.43-3.12.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.43-3.12.2","eol":null,"hubHref":null},{"vendor":"the eclipse foundation","product":"eclipse jetty","name":"Eclipse Jetty","label":"eclipse jetty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 9.4.37, < unspecified","noFixRecorded":false,"fixedIn":null},{"text":"≥ unspecified, ≤ 9.4.42","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0.1, < unspecified","noFixRecorded":false,"fixedIn":null},{"text":"≥ unspecified, ≤ 10.0.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0.1, < unspecified","noFixRecorded":false,"fixedIn":null},{"text":"≥ unspecified, ≤ 11.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.4.37, < unspecified | ≥ unspecified, ≤ 9.4.42 | ≥ 10.0.1, < unspecified | ≥ unspecified, ≤ 10.0.5 | ≥ 11.0.1, < unspecified | ≥ unspecified, ≤ 11.0.5","eol":null,"hubHref":"/vendor/the_eclipse_foundation/eclipse_jetty"}],"affectedCount":26,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-vjv5-gp2w-65vm","label":"github.com/eclipse/jetty.project/security/advisories/GHSA-vjv5-gp2w-65vm","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","WEB","Exploit","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd079fa0ac6f47ba1ad0af98d7d0276547b8a4e005f034fb1016951%40%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r90e7b4c42a96d74c219e448bee6a329ab0cd3205c44b63471d96c3ab%40%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r763840320a80e515331cbc1e613fa93f25faf62e991974171a325c82%40%3Cdev.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r2a3ea27cca2ac7352d392b023b72e824387bc9ff16ba245ec663bdc6%40%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r8e6c116628c1277c3cf132012a66c46a0863fa2a3037c0707d4640d4%40%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r029c0c6833c8bb6acb094733fd7b75029d633f47a92f1c9d14391fc0%40%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r46f748c1dc9cf9b6c1c18f6b5bfc3a869907f68f72e17666f2f30f24%40%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/rc26807be68748b3347decdcd03ae183622244b0b4cb09223d4b7e500%40%3Ccommits.pulsar.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/rb33d65c3e5686f2e3b9bb8a032a44163b2f2ad9d31a8727338f213c1%40%3Ccommits.pulsar.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r9e6158d72ef25077c2dc59fbddade2eacf7d259a2556c97a989f2fe8%40%3Ccommits.pulsar.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r3aefe613abce594c71ace50088d2529bbde65d08b8e7ff2c2723aaa1%40%3Cdev.santuario.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r6e6f50c1ce1fb592cb43e913f5be23df104d50751465f8f1952ace0c%40%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r46900f74dbb7d168aeac43bf0e7f64825376bb7eb74d31a5b33344ce%40%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r679d96f981d4c92724090ed2d5e8565a1d655a72bb315550489f052e%40%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r02f940c27e997a277ff14e79e84551382e1081e8978b417e0c2b0857%40%3Ccommits.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r9d245c6c884bbc804a472116d730c1a01676bf24f93206a34923fc64%40%3Ccommits.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r756443e9d50af7e8c3df82e2c45105f452c8e8195ddbc0c00f58d5fe%40%3Ccommits.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/re5e9bb535db779506013ef8799dc2a299e77cdad6668aa94c456dba6%40%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r4727d282b5c2d951057845a46065d59f6e33132edc0a14f41c26b01e%40%3Cdev.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/re01890eef49d4201018f2c97e26536e3e75f441ecdbcf91986c3bc17%40%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/re3de01414ccf682fe0951205f806dd8e94440798fd64c55a4941de3e%40%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r74fdc446df551fe89a0a16957a1bfdaad19380e0c1afd30625685a9c%40%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r5678d994d4dd8e7c838eed3bbc1a83a7f6bc62724b0cce67e8892a45%40%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r2e32390cb7aedb39069e5b18aa130ca53e766258518faee63c31d3ea%40%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/rcb157f55b9ae41b3076801de927c6fca1669c6d8eaf11a9df5dbeb46%40%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r44ea39ca8110de7353bfec88f58aa3aa58a42bb324b8772512ee190c%40%3Ccommits.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r0626f279ebf65506110a897e3a57ccd4072803ee5434b2503e070398%40%3Ccommits.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r48a93f2bc025acd7c7e341ed3864bfdeb75f0c768d41bc247e1a1f63%40%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/rcea249eb7a0d243f21696e4985de33f3780399bf7b31ea1f6d489b8b%40%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r833a4c8bdbbfeb8a2cd38238e7b59f83edd5c1a0e508b587fc551a46%40%3Cissues.hbase.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r721ab6a5fa8d45bec76714b674f5d4caed2ebfeca69ad1d6d4caae6c%40%3Cdev.hbase.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/re850203ef8700cb826534dd4a1cb9f5b07bb8f6f973b39ff7838d3ba%40%3Cissues.hbase.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r3c55b0baa4dc38958ae147b2f216e212605f1071297f845e14477d36%40%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","label":"www.oracle.com/security-alerts/cpujan2022.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB","Patch","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210819-0006/","label":"security.netapp.com/advisory/ntap-20210819-0006/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"www.oracle.com/security-alerts/cpuapr2022.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB","Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","label":"www.oracle.com/security-alerts/cpujul2022.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB","Patch","Third Party Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212838-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-20212838-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1188438","label":"bugzilla.suse.com/1188438","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34429","label":"www.suse.com/security/cve/CVE-2021-34429","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2021-34429","label":"ubuntu.com/security/CVE-2021-34429","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34429","label":"www.cve.org/CVERecord?id=CVE-2021-34429","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-34429","label":"security-tracker.debian.org/tracker/CVE-2021-34429","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3BXMLXWW5ACU3IDNEEUVRZ3WYWHNGPZM/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34429","label":"nvd.nist.gov/vuln/detail/CVE-2021-34429","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://lists.apache.org/thread.html/r763840320a80e515331cbc1e613fa93f25faf62e991974171a325c82@%3Cdev.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r7dd079fa0ac6f47ba1ad0af98d7d0276547b8a4e005f034fb1016951@%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r833a4c8bdbbfeb8a2cd38238e7b59f83edd5c1a0e508b587fc551a46@%3Cissues.hbase.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r8e6c116628c1277c3cf132012a66c46a0863fa2a3037c0707d4640d4@%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r90e7b4c42a96d74c219e448bee6a329ab0cd3205c44b63471d96c3ab@%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r9d245c6c884bbc804a472116d730c1a01676bf24f93206a34923fc64@%3Ccommits.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r9e6158d72ef25077c2dc59fbddade2eacf7d259a2556c97a989f2fe8@%3Ccommits.pulsar.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/rb33d65c3e5686f2e3b9bb8a032a44163b2f2ad9d31a8727338f213c1@%3Ccommits.pulsar.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/rc26807be68748b3347decdcd03ae183622244b0b4cb09223d4b7e500@%3Ccommits.pulsar.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/rcb157f55b9ae41b3076801de927c6fca1669c6d8eaf11a9df5dbeb46@%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/rcea249eb7a0d243f21696e4985de33f3780399bf7b31ea1f6d489b8b@%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/re01890eef49d4201018f2c97e26536e3e75f441ecdbcf91986c3bc17@%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/re3de01414ccf682fe0951205f806dd8e94440798fd64c55a4941de3e@%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/re5e9bb535db779506013ef8799dc2a299e77cdad6668aa94c456dba6@%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/re850203ef8700cb826534dd4a1cb9f5b07bb8f6f973b39ff7838d3ba@%3Cissues.hbase.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://security.netapp.com/advisory/ntap-20210819-0006","label":"security.netapp.com/advisory/ntap-20210819-0006","hostname":"security.netapp.com","tags":["WEB"]},{"url":"https://github.com/eclipse/jetty.project","label":"github.com/eclipse/jetty.project","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.43.v20210629","label":"github.com/eclipse/jetty.project/releases/tag/jetty-9.4.43.v20210629","hostname":"github.com","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r029c0c6833c8bb6acb094733fd7b75029d633f47a92f1c9d14391fc0@%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r02f940c27e997a277ff14e79e84551382e1081e8978b417e0c2b0857@%3Ccommits.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r0626f279ebf65506110a897e3a57ccd4072803ee5434b2503e070398@%3Ccommits.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r2a3ea27cca2ac7352d392b023b72e824387bc9ff16ba245ec663bdc6@%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r2e32390cb7aedb39069e5b18aa130ca53e766258518faee63c31d3ea@%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r3aefe613abce594c71ace50088d2529bbde65d08b8e7ff2c2723aaa1@%3Cdev.santuario.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r3c55b0baa4dc38958ae147b2f216e212605f1071297f845e14477d36@%3Cissues.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r44ea39ca8110de7353bfec88f58aa3aa58a42bb324b8772512ee190c@%3Ccommits.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r46900f74dbb7d168aeac43bf0e7f64825376bb7eb74d31a5b33344ce@%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r46f748c1dc9cf9b6c1c18f6b5bfc3a869907f68f72e17666f2f30f24@%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r4727d282b5c2d951057845a46065d59f6e33132edc0a14f41c26b01e@%3Cdev.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r48a93f2bc025acd7c7e341ed3864bfdeb75f0c768d41bc247e1a1f63@%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r5678d994d4dd8e7c838eed3bbc1a83a7f6bc62724b0cce67e8892a45@%3Cnotifications.zookeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r679d96f981d4c92724090ed2d5e8565a1d655a72bb315550489f052e@%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r6e6f50c1ce1fb592cb43e913f5be23df104d50751465f8f1952ace0c@%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r721ab6a5fa8d45bec76714b674f5d4caed2ebfeca69ad1d6d4caae6c@%3Cdev.hbase.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r74fdc446df551fe89a0a16957a1bfdaad19380e0c1afd30625685a9c@%3Cjira.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r756443e9d50af7e8c3df82e2c45105f452c8e8195ddbc0c00f58d5fe@%3Ccommits.kafka.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-X3HP-VH3X-X244"]},"timeline":[{"kind":"published","date":"2021-07-15T17:00:10.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T00:12:50.169Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":51,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T15:50:12.795Z","stale":false,"partial":false}}