Executive brief
**UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request
Affected products
- Maven org.eclipse.jetty:jetty-server
Junglewise Threat Intelligence
CVE-2024-13009: **UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request
CVE-2024-13009 · Severity: low · CVSS 3.1 · Published 2025-05-08
Technologies: org.eclipse.jetty:jetty-server (Maven). Vendors: Maven.
Related threats
- Improper Input Validation in Jetty
- Buffer not correctly recycled in Gzip Request inflation
- Operation on a Resource after Expiration or Release in Jetty Server
- Jetty vulnerable to exposure of sensitive information to unauthenticated remote users
- Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request