Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-05 | 2 | Disclosure1General1 |
| 2026-03-06 | 1 | Disclosure1 |
🔵 Jetty, URI parser bypass, #CVE-2025-11143 (Low) https://dailycve.com/jetty-uri-parser-bypass-cve-2025-11143-low/
Post summary
A low‑severity CVE-2025-11143 involving a URI parser bypass in Jetty has been disclosed, but no PoC, exploit, patch, or evidence of active exploitation is mentioned.
CVE-2025-11143 The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple … https://www.cve.org/CVERecord?id=CVE-2025-11143
Post summary
The snippet provides an initial description of Jetty’s URI parsing quirks related to CVE-2025-11143, with no evidence of exploitation, tooling, or mitigation.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2025-11143 - Jetty URI Parser Differential Parsing Vulnerability Intel Report: https://ift.tt/oh5AwYB
Post summary
An alert referencing CVE-2025-11143, a Jetty URI parser differential parsing vulnerability, with a link to an Intel Report.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | eclipse | jetty | - | - | - |