Eclipse Jetty Digest Auth Bypass via ISO-8859-1 Encoding Collision (CVE-173)
Security Advisory
CVE-2025-25248
High
Eclipse
Affected:
- org.eclipse.jetty:jetty-ee8-security >=12.0.0, <12.0.35
- org.eclipse.jetty:jetty-ee8-security >=12.1.0, <12.1.9
- org.eclipse.jetty:jetty-security >=9.4.0, <9.4.62
- org.eclipse.jetty:jetty-security >=10.0.0, <10.0.31
- org.eclipse.jetty:jetty-security >=11.0.0, <11.0.30
Fixed in:
- org.eclipse.jetty:jetty-ee8-security 12.0.36
- org.eclipse.jetty:jetty-ee8-security 12.1.10
- org.eclipse.jetty:jetty-security 9.4.63
- org.eclipse.jetty:jetty-security 10.0.31
- org.eclipse.jetty:jetty-security 11.0.31
参照 CVE:
CVE-2026-10050 · 8.7
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。