GitHub Advisoryadvisory · Maven

GHSA-4jjw-xrr6-9v3p Mortbay Jetty Double Slash URI Information Disclosure Vulnerability

MEDIUM Published 2022-05-01 Modified 2023-08-22 Official page ↗
Aliases
CVE-2007-6672
Ecosystem
Maven
Packages
org.mortbay.jetty:jetty
Severity
Moderate
Weaknesses
CWE-22
Reviewed
2023-08-22

Affected packages

• Maven org.mortbay.jetty:jetty: >= 6.1.5, < 6.1.7 → fixed in 6.1.7

Description

Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple `/` (slash) characters in the URI.

Related

Alias · CVE (1)

  • CVE-2007-6672 Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash)… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References