CVEvulnerability

CVE-2022-2047

2.7 LOW Published 2022-07-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-20

Description

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.

Affected configurations

• eclipse jetty (< 9.4.46) • eclipse jetty (>= 10.0.0 < 10.0.9) • eclipse jetty (>= 11.0.0 <= 11.0.9) • debian debian linux 10.0 • debian debian linux 11.0 • netapp element plug-in for vcenter server • netapp management services for element software and netapp hci • netapp snapcenter • netapp solidfire \& hci storage node • netapp hci compute node

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References