CVE-2025-11143 is a vulnerability in the org.eclipse.jetty URI parser where differential parsing of URIs compared to other parsers can lead to security bypasses, such as bypassing blacklist enforcement or revealing internal system details indirectly. This issue affects the Red Hat Offline Knowledge Portal, which has been updated from Solr 9.8.1 to 10.0.0 to mitigate this and other CVEs. The vulnerability requires an attacker to craft URIs that exploit Jetty's parsing differences while bypassing other components, making exploitation non-trivial. Red Hat rates this vulnerability as low severity and provides an updated container image as a fix.

The vulnerability could allow attackers to bypass security controls that rely on URI parsing consistency, potentially leading to indirect disclosure of internal system details or bypassing firewall protections. However, the impact is limited as exploitation is complex and does not guarantee direct sensitive data leakage. No known active exploits are reported in the wild.

A fixed container image is available from the Red Hat container registry, upgrading the Offline Knowledge Portal to use Solr 10.0.0, which addresses this and other vulnerabilities. Users should update to the provided container image to remediate the issue. No additional mitigations are specified or required beyond applying this update.