PT-2025-47323 · Eclipse+1 · Eclipse Jersey+1

Dimitri Tenenbaum · Published 2025-11-18 · Updated 2026-05-21 · CVE-2025-12383

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions Eclipse Jersey versions 2.45, 3.0.16, 3.1.9

Description A race condition in Eclipse Jersey’s SSL configuration processing can lead to the ignoring of critical SSL configurations, including mutual authentication and custom key/trust stores. This may result in SSLHandshakeException errors, but under certain conditions, could allow unauthorized trust in insecure servers.

Recommendations Update Eclipse Jersey to a version that addresses this race condition.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-296

CWE-362

Related Identifiers

CLEANSTART-2026-AO61361

CLEANSTART-2026-IA43044

CLEANSTART-2026-LO22603

CLEANSTART-2026-LZ76508

CVE-2025-12383

GHSA-7P63-W6X9-6GR7

Affected Products

Bamboo

Eclipse Jersey

References · 116

• 🔥 https://github.com/dtbaum/jerseyCveCandidate · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-42577 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-47554 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-11143 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58057 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-66566 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-1002 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34479 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68161 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-67735 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-IA43044 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1605 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12383 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25710 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42778 · Security Note