Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2022-2047

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
eclipse

Description

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Eclipse Foundation Eclipse Jetty

  • 9.4.0 to < unspecifiedaffected
  • unspecified to ≤ 9.4.46affected
  • 10.0.0 to < unspecifiedaffected
  • unspecified to ≤ 10.0.9affected
  • 11.0.0 to < unspecifiedaffected
  • unspecified to ≤ 11.0.9affected

References