Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability

🗓️ 20 Aug 2025 20:52:17Reported by GitHub Advisory DatabaseType

MadeYouReset vulnerability in HTTP/2 causes resource exhaustion by malformed frames; affects Jetty.

Reporter	Title	Published	Views	Family All 135
IBM Security Bulletins	Security Bulletin: Due to the use of eclipse Jetty Rational Performance Tester is vulnerable to a denial of service	2 Jan 202618:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.3	7 Oct 202516:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by a single vulnerability (CVE-2025-5115)	23 Apr 202618:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Eclipse Jetty (CVE-2025-5115)	29 Sep 202521:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in http2-common (CVE-2025-5115)	10 Mar 202610:18	–	ibm
AstraLinux	Astra Linux - уязвимость в jetty9	3 May 202623:59	–	astralinux
FreeBSD	jenkins -- multiple vulnerabilities	17 Sep 202500:00	–	freebsd
Chainguard	CVE-2025-5115 vulnerabilities	21 Aug 202513:17	–	cgr
Circl	CVE-2025-5115	20 Aug 202519:47	–	circl
CNNVD	Eclipse Jetty 安全漏洞	20 Aug 202500:00	–	cnnvd

Vulners

Node

Source	Link
github	www.github.com/jetty/jetty.project/security/advisories/GHSA-mmxm-8w33-wc4h
github	www.github.com/jetty/jetty.project/pull/13449
github	www.github.com/jetty/jetty.project/commit/f9ee3904788b08203ed62c95a560d951da37bdb1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-5115
github	www.github.com/jetty/jetty.project/releases/tag/jetty-10.0.26
github	www.github.com/jetty/jetty.project/releases/tag/jetty-11.0.26
github	www.github.com/jetty/jetty.project/releases/tag/jetty-12.0.25
github	www.github.com/jetty/jetty.project/releases/tag/jetty-12.1.0
github	www.github.com/jetty/jetty.project/releases/tag/jetty-9.4.58.v20250814
lists	www.lists.debian.org/debian-lts-announce/2025/09/msg00014.html

05 Nov 2025 20:40Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

CVSS 47.7

EPSS0.00529

SSVC