← Database

CVE-2024-8184

MEDIUM CVSS: 5.9 Published: 2024-10-14 Modified: 2026-06-17

Description

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory.

Affected Platforms

Eclipse Jetty

Weakness Type

CWE-400, CWE-770

References