github_osv/GHSA-84q7-p226-4x5w
Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling)
Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), contain an HTTP Request Smuggling Vulnerability that can result in cache poisoning.
gitlab/maven/org.eclipse.jetty/jetty-server/CVE-2017-7656
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling)
Eclipse Jetty contains a vulnerability that could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response.