Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/22 10:56 p.m.25 views

Eclipse Jetty: HTTP Authority/Host mismatch

Summary Jetty currently accepts HTTP/2 and HTTP/3 requests where the regular Host header and the pseudo-header :authority do not match. As a result, the same request can carry two different host identities through Jetty: - logic based on HttpURI / Request.getServerNamerequest uses :authority -...

5.3CVSS5.8AI score0.00196EPSS
SaveExploits0References13Affected Software1
Rows per page
Query Builder