VULNERABILITY INTELLIGENCE

CVE-2022-2047

CVSS score2.7 LOW

EPSS probability1.32%

CISA KEVNot currently listed

Published2022-07-07

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Description

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.

Weakness classification

emo@eclipse.org: CWE-20
nvd@nist.gov: CWE-20

Primary references

emo@eclipse.org — Patch, Third Party Advisory
emo@eclipse.org — Mailing List, Third Party Advisory
emo@eclipse.org — Third Party Advisory
emo@eclipse.org — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory