Improper Validation Of Syntactic Correctness Of Input

🗓️ 21 Oct 2024 11:06:39Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 3 Views

Eclipse Jetty server vulnerable to improper URI input validation allowing malicious redirection attacks.

Reporter	Title	Published	Views	Family All 152
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	9 Jan 202510:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2025 - Multiple CVEs addressed	29 Jan 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.	13 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Eclipse Jetty, IBM App Connect Professional is vulnerable to bypass security restrictions	10 Jan 202508:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to denial-of-service due to Jetty	1 May 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to an open redirect attack due to the Eclipse Jetty package (CVE-2024-6763)	6 Oct 202521:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable due to Eclipse Jetty (CVE-2024-6763)	1 Apr 202503:34	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Eclipse Jetty, IBM Sterling Connect:Direct Web Services is affected by denial-of-service (DoS) attack.	8 Jan 202611:13	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Performance Tester contains vulnerabilities which could affect Eclipse Jetty	15 Dec 202515:11	–	ibm

Vulners

Node

eclipse jetty-httpRange7.0.0.M0–12.0.11java

Source	Link
gitlab	www.gitlab.eclipse.org/security/cve-assignement/-/issues/25
github	www.github.com/jetty/jetty.project/commit/c880d9309b6f7b0730d69b4ec2179763d5d281cb
github	www.github.com/jetty/jetty.project/pull/12012/commits/a8255257e0174f7d3b014a1add591c3b83b83388
github	www.github.com/jetty/jetty.project/pull/12012
github	www.github.com/advisories/GHSA-qh8g-58pp-2wxh
github	www.github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh
security	www.security.netapp.com/advisory/ntap-20250306-0005/

15 Jul 2025 22:16Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.13.7 - 5.3

EPSS0.01189

SSVC