GitHub Advisoryadvisory · Maven

GHSA-966r-962g-2jq5 Mortbay Jetty CRLF Injection Vulnerability

MEDIUM Published 2022-05-01 Modified 2023-09-21 Official page ↗
Aliases
CVE-2007-5615
Ecosystem
Maven
Packages
org.mortbay.jetty:jetty
Severity
Moderate
Weaknesses
CWE-94
Reviewed
2023-09-21

Affected packages

• Maven org.mortbay.jetty:jetty: < 6.1.6rc0 → fixed in 6.1.6rc0

Description

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2007-5615 CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References