{"vulnerability": "CVE-2020-2721", "sightings": [{"uuid": "7105f1c4-915c-4b87-b2c8-19e0cb7ccde6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27212", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-03", "content": "", "creation_timestamp": "2025-03-25T11:00:00.000000Z"}, {"uuid": "9dd326c6-b333-4f4d-9b9b-09132c2e0736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27219", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwpcbokb5425", "content": "", "creation_timestamp": "2025-08-18T21:02:43.672945Z"}, {"uuid": "a817fc79-a7b9-458b-8281-ab83ae445915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27211", "type": "seen", "source": "https://gist.github.com/alon710/e0640bf72e038a3aae6ac5430f90d727", "content": "", "creation_timestamp": "2026-02-02T08:10:50.000000Z"}, {"uuid": "6d5b931a-2c05-472a-912c-c2be14fde66b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27219", "type": "seen", "source": "https://t.me/cibsecurity/22192", "content": "\u203c CVE-2020-27219 \u203c\n\nIn all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-15T02:50:05.000000Z"}, {"uuid": "d19c21f8-c2c3-43c2-aece-416e1572da8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27218", "type": "seen", "source": "https://t.me/cibsecurity/16903", "content": "\u203c CVE-2020-27218 \u203c\n\nIn Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-28T07:50:28.000000Z"}, {"uuid": "55ef6c5a-e19e-42c6-9451-3f3d39b69b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27216", "type": "seen", "source": "https://t.me/cibsecurity/15551", "content": "\u203c CVE-2020-27216 \u203c\n\nIn Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-23T16:53:44.000000Z"}, {"uuid": "0624acaf-32d0-4c66-9ebb-fbc31d646a14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27217", "type": "seen", "source": "https://t.me/cibsecurity/16326", "content": "\u203c CVE-2020-27217 \u203c\n\nIn Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the max-message-size that the protocol adapter has indicated during link establishment. While the AMQP 1.0 protocol explicitly disallows a peer to send such messages, a hand crafted AMQP 1.0 client could exploit this behavior in order to send a message of unlimited size to the adapter, eventually causing the adapter to fail with an out of memory exception.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-13T22:34:02.000000Z"}]}