PT-2026-23435 · Eclipse · Jetty

Zer0Yu · Publicado 2026-03-05 · Atualizado 2026-05-18 · CVE-2025-11143

Positive Technologies (AI Summary) · Pt

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Nome do Software Vulnerável e Versões Afetadas Jetty (versões afetadas não especificadas)

Descrição O parser de URI do Jetty apresenta diferenças em como avalia URIs inválidas ou incomuns em comparação com outros parsers comuns. Essa análise diferencial de URIs, especialmente em sistemas com múltiplos componentes, pode levar a contornos de segurança. Um componente que aplica uma lista negra, por exemplo, pode interpretar URIs de maneira diferente de um componente que gera uma resposta. No mínimo, essa discrepância pode revelar detalhes de implementação.

Recomendações No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CLEANSTART-2026-AO61361

CLEANSTART-2026-DC73689

CLEANSTART-2026-DS86833

CLEANSTART-2026-EP51501

CLEANSTART-2026-GH89210

CLEANSTART-2026-GM79879

CLEANSTART-2026-GQ14179

CLEANSTART-2026-IA43044

CLEANSTART-2026-JU62349

CLEANSTART-2026-KU61465

CLEANSTART-2026-LE11246

CLEANSTART-2026-RG24361

CLEANSTART-2026-RN56220

CLEANSTART-2026-SQ91016

CLEANSTART-2026-SV95049

CLEANSTART-2026-WK99982

CVE-2025-11143

GHSA-WJPW-4J6X-6RWH

OPENSUSE-SU-2026:10300-1

SUSE-SU-2026:1461-1

Produtos afetados

Jetty

Referências · 374

• https://github.com/jetty/jetty.project/security/advisories/GHSA-wjpw-4j6x-6rwh · Aviso do Fabricante
• https://github.com/jetty/jetty.project · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GH89210.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GM79879.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AO61361.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SQ91016.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RN56220.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RG24361.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SV95049.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IA43044.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LE11246.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EP51501.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JU62349.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WK99982.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KU61465.json · Nota