Differential URI Parsing Vulnerability in Jetty Server

CVE-2025-11143

What is CVE-2025-11143?

The Jetty server features a distinct URI parser that differs from conventional parsers, which can lead to security vulnerabilities during URI evaluation. This discrepancy may cause components within a system to interpret URIs inconsistently, allowing potential bypass mechanisms. For instance, a component enforcing a blacklist might evaluate a URI differently than another component responsible for generating responses, potentially revealing sensitive implementation details. Users of Jetty should assess their configurations and practices to mitigate potential security risks associated with differential URI parsing.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References