CVE-2022-2047

Published July 7th, 2022

View on NVD ↗

CVSS v3

2.7

LOW

CVSS v2

MEDIUM

Affected

PROJECT

Description

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.

jetty/jetty.project

Eclipse Jetty® - Web Container & Clients - supports HTTP/3, HTTP/2, HTTP/1, websocket, servlets, and more

GitHub

4.08K