CyberRota Analysis
AI-GeneratedEclipse Jetty is vulnerable to a flaw where the server retains HTTP/1.1 request trailers from the first request, leading to potential information leakage in subsequent requests. This can result in unintended exposure of sensitive data, as subsequent requests may inadvertently include trailers from previous requests. Organizations using Jetty should prioritize patching this vulnerability to mitigate the risk of data exposure.
Original NVD Description
In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection. Subsequent request that do not have trailers report the trailers of the first request. Subsequent request that do have trailers report the union of trailers of the first request and the current request.
Related CVEs
Other vulnerabilities affecting the same vendor(s)