CVE-2019-10246
MediumAdvisory
Published 23 Apr 2019In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.040
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 52
- of 17,781 indexed, latest versions
- Container images
- 44
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Information Exposure vulnerability in Eclipse Jetty
Carried by container images the latest versions of 52 of 17,781 indexed charts deploy, on 44 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| jetty-servermaven | 9.2.2.v20140723, 9.2.5.v20141112, 9.2.10.v20150310, 9.2.13.v20150730+14 more | 9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418 | 44 |
- OSV records
- GHSA-r28m-g6j9-r2h5
Charts affected
52 by stars
Container images carrying it
44 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bde2020/ | 620267768985 | jetty-server | 9.2.28.v20190418 | 4 |
| gradiant/ | a1ee6de94c04 | jetty-server | 9.3.27.v20190418 | 4 |
| selenium/ | 02f251d48d5f | jetty-server | 9.4.17.v20190418 | 3 |
| apachepulsar/ | b341ef76a852 | jetty-server | 9.4.17.v20190418 | 2 |
| gradiant/ | aae4f8a21f8b | jetty-server | 9.2.28.v20190418 | 2 |
| gradiant/ | 97657d56e927 | jetty-server | 9.3.27.v20190418 | 2 |
| linuxserver/ | 9932d6759112 | jetty-server | 9.4.17.v20190418 | 2 |
| mbentley/ | f4e682274bed | jetty-server | 9.4.17.v20190418 | 2 |
| 5200710/ | e34ab066d2ed | jetty-server | 9.3.27.v20190418 | 1 |
| anguda/ | c435285fc241 | jetty-server | 9.4.17.v20190418 | 1 |
| apacheignite/ | d7deab68b8fa | jetty-server | 9.3.27.v20190418 | 1 |
| apachepinot/ | 0018bb04ced7 | jetty-server | 9.3.27.v20190418 | 1 |
| apachepulsar/ | 4db6ff0b4045 | jetty-server | 9.4.17.v20190418 | 1 |
| assistiot/ | ea254b6d8a31 | jetty-server | 9.4.17.v20190418 | 1 |
| bivas/ | 05545994f806 | jetty-server | 9.4.17.v20190418 | 1 |
| confluentinc/ | c87b1c07fb53 | jetty-server | 9.4.17.v20190418 | 1 |
| craigwillis/ | ae317d7e4724 | jetty-server | 9.2.28.v20190418 | 1 |
| datappeal/ | e38c085a3567 | jetty-server | 9.3.27.v20190418 | 1 |
| dbanda/ | 0ca125e68e53 | jetty-server | 9.3.27.v20190418 | 1 |
| dbanda/ | d0e6367876ae | jetty-server | 9.3.27.v20190418 | 1 |
| geonetwork/ | 20c9bb761f67 | jetty-server | 9.4.17.v20190418 | 1 |
| gocd/ | 2da45cb09d57 | jetty-server | 9.4.17.v20190418 | 1 |
| gradiant/ | 45eceb1bc55c | jetty-server | 9.4.17.v20190418 | 1 |
| ibmcom/ | 7e4dc1e27cdf | jetty-server | 9.2.28.v20190418 | 1 |
| ibmcom/ | b558f2b444ae | jetty-server | 9.4.17.v20190418 | 1 |
| jenkinsci/ | a1f33f004659 | jetty-server | 9.4.17.v20190418 | 1 |
| jingking/ | 43e74ab234e1 | jetty-server | 9.4.17.v20190418 | 1 |
| keyfactor/ | 798fbbe00283 | jetty-server | 9.4.17.v20190418 | 1 |
| library/ | a1ba477fa412 | jetty-server | 9.4.17.v20190418 | 1 |
| library/ | d4eaa8484246 | jetty-server | 9.2.28.v20190418 | 1 |
| library/ | bd5d420506d6 | jetty-server | 9.4.17.v20190418 | 1 |
| lightbend/ | 0bedf37f428a | jetty-server | 9.3.27.v20190418 | 1 |
| metabase/ | ffb2dccacefc | jetty-server | 9.4.17.v20190418 | 1 |
| mintproject/ | ffbb13f20465 | jetty-server | 9.4.17.v20190418 | 1 |
| ncsa/ | af6649d59150 | jetty-server | 9.2.28.v20190418 | 1 |
| prom/ | fc4b9b9f5e15 | jetty-server | 9.4.17.v20190418 | 1 |
| rundeck/ | b13e8059ad72 | jetty-server | 9.4.17.v20190418 | 1 |
| slamdev/ | b4b029c9b15f | jetty-server | 9.2.28.v20190418 | 1 |
| snappydatainc/ | fd4b2070466f | jetty-server | 9.3.27.v20190418 | 1 |
| sslhep/ | 9e80af083079 | jetty-server | 9.3.27.v20190418 | 1 |
| thelastpickle/ | 9c53996c457d | jetty-server | 9.4.17.v20190418 | 1 |
| trinodb/ | ee80ab5eeab2 | jetty-server | 9.3.27.v20190418 | 1 |
| ghcr.io/ | b83b5b81d4b6 | jetty-server | 9.4.17.v20190418 | 1 |
| quay.io/ | 98c26e1b8f70 | jetty-server | 9.4.17.v20190418 | 1 |