PT-2025-47323
CVE-2025-12383
·
Published
2025-11-18
·
Updated
2026-09-29
Description by
CVSS 4.0
9.4
CriticalMetricsAV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Name of the Vulnerable Software and Affected Versions
Eclipse Jersey versions 2.45, 3.0.16, 3.1.9
Description
A race condition in Eclipse Jersey’s SSL configuration processing can lead to the ignoring of critical SSL configurations, including mutual authentication and custom key/trust stores. This may result in
SSLHandshakeException errors, but under certain conditions, could allow unauthorized trust in insecure servers.Recommendations
Update Eclipse Jersey to a version that addresses this race condition.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾