Entrar Obtener clave API

Vulnerabilidades de Eclipse Foundation Eclipse Jetty - EE8 (CVE)

Registros CVE publicados para Eclipse Foundation Eclipse Jetty - EE8, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

8.7Alta

CVE-2026-10050 hace 3 meses

Digest authentication lossy encoding

Eclipse Foundation Eclipse Jetty - EE8; Eclipse Foundation Eclipse Jetty - EE9; Eclipse Foundation Eclipse Jetty

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for histor…