CVE-2024-6763
LowAdvisory
Published 14 Oct 2024In the index since 5 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.7
- base score, highest
- EPSS
- 0.010
- 60th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 274
- of 17,781 indexed, latest versions
- Container images
- 253
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Eclipse Jetty URI parsing of invalid authority
Carried by container images the latest versions of 274 of 17,781 indexed charts deploy, on 253 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| jetty-httpmaven | 7.6.0.v20120127, 8.1.7.v20120910, 8.1.9.v20130131, 8.1.12.v20130726+74 more | 12.0.12 | 253 |
- OSV records
- GHSA-qh8g-58pp-2wxh
Charts affected
274 by stars
Container images carrying it
253 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| confluentinc/ | 8ec46c27982f | jetty-http | 12.0.12 | 1 |
| confluentinc/ | ee403d5b9090 | jetty-http | 12.0.12 | 1 |
| confluentinc/ | b651d4b6185a | jetty-http | 12.0.12 | 1 |
| confluentinc/ | 0bec03c1f3ce | jetty-http | 12.0.12 | 1 |
| confluentinc/ | 5ca5f3269814 | jetty-http | 12.0.12 | 1 |
| confluentinc/ | 78c190f4472c | jetty-http | 12.0.12 | 1 |
| consensys/ | bf6ecd2ea716 | jetty-http | 12.0.12 | 1 |
| craigwillis/ | ae317d7e4724 | jetty-http | 12.0.12 | 1 |
| datappeal/ | e38c085a3567 | jetty-http | 12.0.12 | 1 |
| dbanda/ | 0ca125e68e53 | jetty-http | 12.0.12 | 1 |
| dbanda/ | d0e6367876ae | jetty-http | 12.0.12 | 1 |
| deltaio/ | 8b75118187c5 | jetty-http | 12.0.12 | 1 |
| dniel/ | 45a667852f2a | jetty-http | 12.0.12 | 1 |
| dremio/ | 80ed2e3b7c43 | jetty-http | 12.0.12 | 1 |
| duck1123/ | 119fc5d4cbfb | jetty-http | 12.0.12 | 1 |
| dwimberger/ | 0c636e55eb82 | jetty-http | 12.0.12 | 1 |
| dzikoysk/ | 4128c2d7a6ba | jetty-http | 12.0.12 | 1 |
| easypi/ | d2950a36a576 | jetty-http | 12.0.12 | 1 |
| farberg/ | 4b4a22487394 | jetty-http | 12.0.12 | 1 |
| fimperato/ | 604012b77841 | jetty-http | 12.0.12 | 1 |
| folioci/ | 29c3f233a498 | jetty-http | 12.0.12 | 1 |
| folioci/ | cfd6109bf477 | jetty-http | 12.0.12 | 1 |
| folioci/ | ae3b069d4ba5 | jetty-http | 12.0.12 | 1 |
| folioci/ | 571fa1ffe8c9 | jetty-http | 12.0.12 | 1 |
| folioci/ | f53c327a48e8 | jetty-http | 12.0.12 | 1 |
| fonoster/ | 2ca65af17cbc | jetty-http | 12.0.12 | 1 |
| fonoster/ | d08a8a574a50 | jetty-http | 12.0.12 | 1 |
| fonoster/ | e0c823506eb2 | jetty-http | 12.0.12 | 1 |
| frankescobar/ | 8a4d7e9308de | jetty-http | 12.0.12 | 1 |
| frankescobar/ | cafa03b94dac | jetty-http | 12.0.12 | 1 |
| gchq/ | c460bb587d6d | jetty-http | 12.0.12 | 1 |
| geonetwork/ | 20c9bb761f67 | jetty-http | 12.0.12 | 1 |
| gocd/ | 2da45cb09d57 | jetty-http | 12.0.12 | 1 |
| gocd/ | 720d1012b93f | jetty-http | 12.0.12 | 1 |
| gradiant/ | e3bf364fe713 | jetty-http | 12.0.12 | 1 |
| gradiant/ | 45eceb1bc55c | jetty-http | 12.0.12 | 1 |
| graylog/ | 8a1f641cd7aa | jetty-http | 12.0.12 | 1 |
| gridgain/ | d32d182a0e6a | jetty-http | 12.0.12 | 1 |
| gridgain/ | 95018390077b | jetty-http | 12.0.12 | 1 |
| gurolakman/ | ed8fd2062548 | jetty-http | 12.0.12 | 1 |
| gurolakman/ | 9abb3882bcbd | jetty-http | 12.0.12 | 1 |
| gurolakman/ | ce23b20a8a17 | jetty-http | 12.0.12 | 1 |
| gurolakman/ | b22e746edd5d | jetty-http | 12.0.12 | 1 |
| gurolakman/ | bf18525c5ad9 | jetty-http | 12.0.12 | 1 |
| gurolakman/ | 8739565c3ea2 | jetty-http | 12.0.12 | 1 |
| hazelcast/ | a825ecbe9fda | jetty-http | 12.0.12 | 1 |
| hazelcast/ | f9d34300d330 | jetty-http | 12.0.12 | 1 |
| hivemq/ | 4d194450d48e | jetty-http | 12.0.12 | 1 |
| iamdorsah/ | db83a0254d81 | jetty-http | 12.0.12 | 1 |
| ibmcom/ | 7e4dc1e27cdf | jetty-http | 12.0.12 | 1 |