Vulnerability Identifier
CVE-2024-6763
2024-10-14
Severity Assessment
3.7
LOW
CVSS v3.x Score
Clinical Analysis (Description)
Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsing.
The HttpURI class does insufficient validation on the authority segment of a URI. However the behaviour of HttpURI
differs from the common browsers in how it handles a URI that would be
considered invalid if fully validated against the RRC. Specifically HttpURI
and the browser may differ on the value of the host extracted from an
invalid URI and thus a combination of Jetty and a vulnerable browser may
be vulnerable to a open redirect attack or to a SSRF attack if the URI
is used after passing validation checks.
Vector Sequencing
Attack Parameters
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Impact Consequences
Technical Impact
Unchanged
Scope
None
Confidentiality
Low
Integrity
None
Availability
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Population
Affected Configurations
Total: 205 detected entries
Software List
Scrollable
ec
jetty
Vendor: eclipse • v9.3.4
ec
jetty
Vendor: eclipse • v9.3.6
ec
jetty
Vendor: eclipse • v7.6.2
ec
jetty
Vendor: eclipse • v9.4.30
ec
jetty
Vendor: eclipse • v9.4.8
ec
jetty
Vendor: eclipse • v9.4.37
ec
jetty
Vendor: eclipse • v9.3.7
ec
jetty
Vendor: eclipse • v9.2.2
ec
jetty
Vendor: eclipse • v9.1.0
ec
jetty
Vendor: eclipse • v9.3.2
ec
jetty
Vendor: eclipse • v9.4.7
ec
jetty
Vendor: eclipse • v9.3.3
ec
jetty
Vendor: eclipse • v7.1.4
ec
jetty
Vendor: eclipse • v7.4.0
ec
jetty
Vendor: eclipse • v9.0.7
ec
jetty
Vendor: eclipse • v9.1.1
ec
jetty
Vendor: eclipse • v8.0.3
ec
jetty
Vendor: eclipse • v9.3.11
ec
jetty
Vendor: eclipse • v9.3.5
ec
jetty
Vendor: eclipse • v9.4.29
ec
jetty
Vendor: eclipse • v8.1.3
ec
jetty
Vendor: eclipse • v9.4.26
ec
jetty
Vendor: eclipse • v7.1.3
ec
jetty
Vendor: eclipse • v7.5.4
ec
jetty
Vendor: eclipse • v9.4.11
ec
jetty
Vendor: eclipse • v9.4.17
ec
jetty
Vendor: eclipse • v7.6.16
ec
jetty
Vendor: eclipse • v9.2.19
ec
jetty
Vendor: eclipse • v9.4.12
ec
jetty
Vendor: eclipse • v9.4.55
ec
jetty
Vendor: eclipse • v9.0.0
ec
jetty
Vendor: eclipse • v9.3.10
ec
jetty
Vendor: eclipse • v9.0.1
ec
jetty
Vendor: eclipse • v7.6.10
ec
jetty
Vendor: eclipse • v9.4.47
ec
jetty
Vendor: eclipse • v9.4.33
ec
jetty
Vendor: eclipse • v7.5.1
ec
jetty
Vendor: eclipse • v9.4.21
ec
jetty
Vendor: eclipse • v9.4.9
ec
jetty
Vendor: eclipse • v9.3.23
ec
jetty
Vendor: eclipse • v8.1.12
ec
jetty
Vendor: eclipse • v7.4.1
ec
jetty
Vendor: eclipse • v9.3.8
ec
jetty
Vendor: eclipse • v8.1.8
ec
jetty
Vendor: eclipse • v9.3.24
ec
jetty
Vendor: eclipse • v9.4.27
ec
jetty
Vendor: eclipse • v9.4.3
ec
jetty
Vendor: eclipse • v7.6.21
ec
jetty
Vendor: eclipse • v9.4.40
ec
jetty
Vendor: eclipse • v9.4.14
ec
jetty
Vendor: eclipse • v7.4.4
ec
jetty
Vendor: eclipse • v9.3.0
ec
jetty
Vendor: eclipse • v9.2.6
ec
jetty
Vendor: eclipse • v7.6.18
ec
jetty
Vendor: eclipse • v9.3.9
ec
jetty
Vendor: eclipse • v9.0.5
ec
jetty
Vendor: eclipse • v9.2.23
ec
jetty
Vendor: eclipse • v8.1.6
ec
jetty
Vendor: eclipse • v9.3.17
ec
jetty
Vendor: eclipse • v7.6.17
ec
jetty
Vendor: eclipse • v8.2.0
ec
jetty
Vendor: eclipse • v8.0.0
ec
jetty
Vendor: eclipse • v7.1.0
ec
jetty
Vendor: eclipse • v9.3.22
ec
jetty
Vendor: eclipse • v9.3.21
ec
jetty
Vendor: eclipse • v9.4.53
ec
jetty
Vendor: eclipse • v9.4.24
ec
jetty
Vendor: eclipse • v9.2.1
ec
jetty
Vendor: eclipse • v9.4.19
ec
jetty
Vendor: eclipse • v8.1.2
ec
jetty
Vendor: eclipse • v7.6.3
ec
jetty
Vendor: eclipse • v9.2.13
ec
jetty
Vendor: eclipse • v9.4.43
ec
jetty
Vendor: eclipse • v9.4.15
ec
jetty
Vendor: eclipse • v7.1.2
ec
jetty
Vendor: eclipse • v9.4.42
ec
jetty
Vendor: eclipse • v7.6.9
ec
jetty
Vendor: eclipse • v9.2.21
ec
jetty
Vendor: eclipse • v7.1.5
ec
jetty
Vendor: eclipse • v9.4.41
ec
jetty
Vendor: eclipse • v9.4.10
ec
jetty
Vendor: eclipse • v7.6.20
ec
jetty
Vendor: eclipse • v8.1.18
ec
jetty
Vendor: eclipse • v7.0.2
ec
jetty
Vendor: eclipse • v8.0.1
ec
jetty
Vendor: eclipse • v7.6.6
ec
jetty
Vendor: eclipse • v9.3.25
ec
jetty
Vendor: eclipse • v9.0.3
ec
jetty
Vendor: eclipse • v9.4.4
ec
jetty
Vendor: eclipse • v9.4.0
ec
jetty
Vendor: eclipse • v8.1.20
ec
jetty
Vendor: eclipse • v9.4.38
ec
jetty
Vendor: eclipse • v9.4.20
ec
jetty
Vendor: eclipse • v9.2.3
ec
jetty
Vendor: eclipse • v8.1.11
ec
jetty
Vendor: eclipse • v9.2.22
ec
jetty
Vendor: eclipse • v7.6.13
ec
jetty
Vendor: eclipse • v9.2.8
ec
jetty
Vendor: eclipse • v9.3.1
ec
jetty
Vendor: eclipse • v7.6.0
ec
jetty
Vendor: eclipse • v9.4.52
ec
jetty
Vendor: eclipse • v8.1.19
ec
jetty
Vendor: eclipse • v8.1.13
ec
jetty
Vendor: eclipse • v9.3.13
ec
jetty
Vendor: eclipse • v9.4.48
ec
jetty
Vendor: eclipse • v9.4.18
ec
jetty
Vendor: eclipse • v9.2.12
ec
jetty
Vendor: eclipse • v8.1.10
ec
jetty
Vendor: eclipse • v9.1.2
ec
jetty
Vendor: eclipse • v7.6.12
ec
jetty
Vendor: eclipse • v9.3.14
ec
jetty
Vendor: eclipse • v8.0.2
ec
jetty
Vendor: eclipse • v9.4.23
ec
jetty
Vendor: eclipse • v9.3.18
ec
jetty
Vendor: eclipse • v9.4.2
ec
jetty
Vendor: eclipse • v7.5.0
ec
jetty
Vendor: eclipse • v9.0.4
ec
jetty
Vendor: eclipse • v8.1.22
ec
jetty
Vendor: eclipse • v9.2.28
ec
jetty
Vendor: eclipse • v8.1.16
ec
jetty
Vendor: eclipse • v7.6.8
ec
jetty
Vendor: eclipse • v7.6.14
ec
jetty
Vendor: eclipse • v9.0.2
ec
jetty
Vendor: eclipse • v8.0.4
ec
jetty
Vendor: eclipse • v9.2.24
ec
jetty
Vendor: eclipse • v9.1.6
ec
jetty
Vendor: eclipse • v9.4.1
ec
jetty
Vendor: eclipse • v9.2.17
ec
jetty
Vendor: eclipse • v8.1.4
ec
jetty
Vendor: eclipse • v9.4.32
ec
jetty
Vendor: eclipse • v9.4.16
ec
jetty
Vendor: eclipse • v9.3.26
ec
jetty
Vendor: eclipse • v9.2.25
ec
jetty
Vendor: eclipse • v9.4.5
ec
jetty
Vendor: eclipse • v9.4.51
ec
jetty
Vendor: eclipse • v9.4.44
ec
jetty
Vendor: eclipse • v8.1.17
ec
jetty
Vendor: eclipse • v8.1.15
ec
jetty
Vendor: eclipse • v9.2.7
ec
jetty
Vendor: eclipse • v8.1.9
ec
jetty
Vendor: eclipse • v9.2.11
ec
jetty
Vendor: eclipse • v9.3.29
ec
jetty
Vendor: eclipse • v9.1.3
ec
jetty
Vendor: eclipse • v9.3.15
ec
jetty
Vendor: eclipse • v9.2.15
ec
jetty
Vendor: eclipse • v9.3.16
ec
jetty
Vendor: eclipse • v9.4.25
ec
jetty
Vendor: eclipse • v7.2.2
ec
jetty
Vendor: eclipse • v9.2.18
ec
jetty
Vendor: eclipse • v9.4.49
ec
jetty
Vendor: eclipse • v7.1.6
ec
jetty
Vendor: eclipse • v7.2.1
ec
jetty
Vendor: eclipse • v7.6.19
ec
jetty
Vendor: eclipse • v7.4.5
ec
jetty
Vendor: eclipse • v8.1.21
ec
jetty
Vendor: eclipse • v7.4.2
ec
jetty
Vendor: eclipse • v9.4.31
ec
jetty
Vendor: eclipse • v9.3.12
ec
jetty
Vendor: eclipse • v9.1.4
ec
jetty
Vendor: eclipse • v7.1.1
ec
jetty
Vendor: eclipse • v7.6.4
ec
jetty
Vendor: eclipse • v9.2.0
ec
jetty
Vendor: eclipse • v9.4.46
ec
jetty
Vendor: eclipse • v8.1.7
ec
jetty
Vendor: eclipse • v7.2.0
ec
jetty
Vendor: eclipse • v9.4.45
ec
jetty
Vendor: eclipse • v7.3.0
ec
jetty
Vendor: eclipse • v9.4.35
ec
jetty
Vendor: eclipse • v7.6.5
ec
jetty
Vendor: eclipse • v9.2.9
ec
jetty
Vendor: eclipse • v7.6.1
ec
jetty
Vendor: eclipse • v7.6.7
ec
jetty
Vendor: eclipse • v9.2.14
ec
jetty
Vendor: eclipse • v7.5.2
ec
jetty
Vendor: eclipse • v9.1.5
ec
jetty
Vendor: eclipse • v9.4.39
ec
jetty
Vendor: eclipse • v9.4.13
ec
jetty
Vendor: eclipse • v9.2.5
ec
jetty
Vendor: eclipse • v9.4.6
ec
jetty
Vendor: eclipse • v9.4.50
ec
jetty
Vendor: eclipse • v9.2.27
ec
jetty
Vendor: eclipse • v9.3.27
ec
jetty
Vendor: eclipse • v9.3.19
ec
jetty
Vendor: eclipse • v7.5.3
ec
jetty
Vendor: eclipse • v8.1.1
ec
jetty
Vendor: eclipse • v9.4.34
ec
jetty
Vendor: eclipse • v7.4.3
ec
jetty
Vendor: eclipse • v9.2.26
ec
jetty
Vendor: eclipse • v7.6.11
ec
jetty
Vendor: eclipse • v9.2.20
ec
jetty
Vendor: eclipse • v8.1.5
ec
jetty
Vendor: eclipse • v9.0.6
ec
jetty
Vendor: eclipse • v9.2.16
ec
jetty
Vendor: eclipse • v9.3.20
ec
jetty
Vendor: eclipse • v9.4.36
ec
jetty
Vendor: eclipse • v9.4.22
ec
jetty
Vendor: eclipse • v7.6.15
ec
jetty
Vendor: eclipse • v8.1.0
ec
jetty
Vendor: eclipse • v7.0.1
ec
jetty
Vendor: eclipse • v9.2.10
ec
jetty
Vendor: eclipse • v7.0.0
ec
jetty
Vendor: eclipse • v7.3.1
ec
jetty
Vendor: eclipse • v8.1.14
ec
jetty
Vendor: eclipse • v9.2.4
ec
jetty
Vendor: eclipse • v9.4.28
Timeline
Time Line
PUBLICATION
14 Oct 2024
MODIFICATION
10 Jul 2025
FIRST PATCH
21 Apr 2026
Impact Statistics
Key Metrics
CVSS Score
3.7
LOW
Products
205
Affected
Patches
5
Available
Remediation Protocol
Recommended Solution
No automatic solution found. Check vendor references.
Recommended Actions for Administrators
Immediate Action Plan
1. Inventory
Identify all affected systems in your infrastructure.
2. Assessment
Assess exposure and criticality for your organization.
3. Mitigation
Apply patches or available workarounds.
4. Verification
Test and confirm effectiveness of applied measures.
Sources & Bibliography