~ / search / GHSA-9986-w5h5-vw59

GHSA-9986-w5h5-vw59

Directory traversal in Mort Bay Jetty

Source: GitHub Advisory Database (reviewed) Moderate CVE-2009-1523

Packages

EcosystemPackageAffectedFixed in
Maven org.mortbay.jetty:jetty < 6.1.17 6.1.17
Maven org.mortbay.jetty:jetty >= 7.0.0.M0, < 7.0.0.M2 7.0.0.M2

Details

As written in the advisory (Markdown source, shown as plain text).

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

References

External links from the advisory. They lead to third-party sites.