CVE-2025-11143

Name of the Vulnerable Software and Affected Versions Jetty (affected versions not specified)

Description The Jetty URI parser exhibits differences in how it evaluates invalid or unusual URIs compared to other common parsers. This differential parsing of URIs, particularly in systems with multiple components, can lead to security bypasses. A component enforcing a blacklist, for example, might interpret URIs differently from a component generating a response. At a minimum, this discrepancy can reveal implementation details.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.