GHSA-cwq3-qp8v-w8q3
Mortbay Jetty Discloses JSP Source Code
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.mortbay.jetty:jetty | < 5.1.6 | 5.1.6 |
Details
As written in the advisory (Markdown source, shown as plain text).
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (`%5C`) characters. NOTE: this might be the same issue as CVE-2006-2758.
References
External links from the advisory. They lead to third-party sites.