CVE-2024-6762CWE-400

Jetty PushSessionCacheFilter can cause remote DoS attacks

Low · published October 14, 2024

CVSS v3.1
3.1
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

Jetty PushSessionCacheFilter can be exploited by unauthenticated users

to launch remote DoS attacks by exhausting the server’s memory.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00942 · 60.6th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-10-14T15:07Z
EPSS history
Timeline
  • 14 OCT 15:07Z
    Jetty PushSessionCacheFilter can cause remote DoS attacks
    cvelistv5