uthrasri/Jetty-v9.4.31_CVE-2023-40167

PoC

view exploit source poc_in_githubauthor uthrasripublished 2025-03-03catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-40167US	medium5.3	1.28% (70th)	Exploit	2023-09-15
Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.