GitHub Advisoryadvisory · Maven

GHSA-9986-w5h5-vw59 Directory traversal in Mort Bay Jetty

MEDIUM Published 2022-05-02 Modified 2023-08-03 Official page ↗
Aliases
CVE-2009-1523
Ecosystem
Maven
Packages
org.mortbay.jetty:jetty
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-22
Reviewed
2023-08-03

Affected packages

• Maven org.mortbay.jetty:jetty: < 6.1.17 → fixed in 6.1.17 • Maven org.mortbay.jetty:jetty: >= 7.0.0.M0, < 7.0.0.M2 → fixed in 7.0.0.M2

Description

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

Related

Alias · CVE (1)

  • CVE-2009-1523 Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References