Eclipse Jetty Digest Auth Bypass via ISO-8859-1 Encoding Collision (CVE-173)
Security Advisory
CVE-2025-25248
High
Eclipse
Affected:
- org.eclipse.jetty:jetty-ee8-security >=12.0.0, <12.0.35
- org.eclipse.jetty:jetty-ee8-security >=12.1.0, <12.1.9
- org.eclipse.jetty:jetty-security >=9.4.0, <9.4.62
- org.eclipse.jetty:jetty-security >=10.0.0, <10.0.31
- org.eclipse.jetty:jetty-security >=11.0.0, <11.0.30
Fixed in:
- org.eclipse.jetty:jetty-ee8-security 12.0.36
- org.eclipse.jetty:jetty-ee8-security 12.1.10
- org.eclipse.jetty:jetty-security 9.4.63
- org.eclipse.jetty:jetty-security 10.0.31
- org.eclipse.jetty:jetty-security 11.0.31
Referenced CVEs:
CVE-2026-10050 · 8.7
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.