CVE-2024-13009

Name of the Vulnerable Software and Affected Versions Eclipse Jetty versions 9.4.0 through 9.4.56

Description A buffer can be incorrectly released when Eclipse Jetty encounters a gzip error while inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests.

Recommendations For Eclipse Jetty versions 9.4.0 through 9.4.56, update to a version that fixes the buffer release issue when confronted with gzip errors during request body inflation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.