Description
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.
Remediation
References
Related Vulnerabilities
Jenkins Incorrect Authorization Vulnerability (CVE-2018-1999003)
Joomla! Core 3.7.0 SQL Injection (3.7.0)
MySQL CVE-2013-1544 Vulnerability (CVE-2013-1544)
Oracle Database Server CVE-2009-1021 Vulnerability (CVE-2009-1021)
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (4.0.2)