CVE-2017-7658: XSS
Eclipse Jetty is vulnerable to HTTP request smuggling, caused by a flaw when handling more than one Content-Length headers. By sending a specially-crafted request, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks.
Other sources
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2017-7658.
What is the severity of CVE-2017-7658?
The severity of CVE-2017-7658 is critical with a CVSS score of 9.8.
Which software versions are affected by CVE-2017-7658?
Eclipse Jetty Server versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations) are affected.
How can I mitigate the vulnerability CVE-2017-7658?
To mitigate CVE-2017-7658, update Jetty Server to version 9.2.25 or newer.
Where can I find more information about CVE-2017-7658?
You can find more information about CVE-2017-7658 in the references provided: [link1], [link2], [link3].