~ / search / GHSA-qmgj-5h75-jr67

GHSA-qmgj-5h75-jr67

Jetty Directory Traversal Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2006-2758

Packages

EcosystemPackageAffectedFixed in
Maven org.mortbay.jetty:jetty <= 6.0.beta16 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a `%2e%2e%5c` (encoded `../`) in the URL. NOTE: this might be the same issue as CVE-2005-3747.

References

External links from the advisory. They lead to third-party sites.