CVE-2021-28165 @ Maven-org.eclipse.jetty:jetty-io-9.4.12.RC0

[cxronen]

Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about CVE-2021-28165
Checkmarx Project: cxronen/BookStore_VSCode
Repository URL: https://github.com/cxronen/BookStore_VSCode
Branch: master
Scan ID: 7c24212b-2b21-4248-ba1f-b86776f5d0c2

---

In Eclipse Jetty from 7.2.2.v20101205 to 9.4.38.v20210224, 10.0.X before 10.0.2 and 11.0.X before 11.0.2, CPU usage can reach 100% upon receiving a large invalid TLS frame.

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 9.4.39.v20210325