{
  "cveId": "CVE-2025-11143",
  "url": "https://patchblox.com/security/cve/CVE-2025-11143",
  "summary": "CVE-2025-11143 is fixed in 3 products on 1 platform, first by DEBIAN-CVE-2025-11143, released March 5, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "jetty12: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs.\u00A0Differ...",
  "description": "The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs.\u00A0Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response.\u00A0At the very least, differential parsing may divulge implementation details.",
  "published": "2026-03-05T10:15:54Z",
  "severity": "medium",
  "cvss": 6.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
  "epss": 0.00182,
  "epssPercentile": 0.07822,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "jetty-minimal",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "9.4.58-150200.3.37.1",
      "fix": "SUSE-SU-2026:1461-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1461-1",
      "released": "2026-04-20T05:46:51Z"
    },
    {
      "platform": "linux",
      "product": "jetty-minimal",
      "release": "sles 15.7",
      "fixedVersion": "9.4.58-150200.3.37.1",
      "fix": "SUSE-SU-2026:1461-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1461-1",
      "released": "2026-04-20T05:46:51Z"
    },
    {
      "platform": "linux",
      "product": "jetty-websocket",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "9.4.58-150200.3.37.1",
      "fix": "SUSE-SU-2026:1461-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1461-1",
      "released": "2026-04-20T05:46:51Z"
    },
    {
      "platform": "linux",
      "product": "jetty12",
      "release": "Debian 14",
      "fixedVersion": "12.0.32-1",
      "fix": "DEBIAN-CVE-2025-11143",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-11143",
      "released": "2026-03-05T10:15:54Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T07:50:38Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}