Eclipse Foundation Eclipse Jetty - EE8 vulnerabilities (CVE)

CVE records published for Eclipse Foundation Eclipse Jetty - EE8, newest first. Follow to get an email when a new one appears.

1 results

8.7High

CVE-2026-10050 3 months ago

Digest authentication lossy encoding

Eclipse Foundation Eclipse Jetty - EE8; Eclipse Foundation Eclipse Jetty - EE9; Eclipse Foundation Eclipse Jetty

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for histor…