GitHub Advisoryadvisory · Maven

GHSA-cwq3-qp8v-w8q3 Mortbay Jetty Discloses JSP Source Code

MEDIUM Published 2022-05-01 Modified 2023-09-18 Official page ↗
Aliases
CVE-2005-3747
Ecosystem
Maven
Packages
org.mortbay.jetty:jetty
Severity
Moderate
Weaknesses
CWE-200
Reviewed
2023-09-18

Affected packages

• Maven org.mortbay.jetty:jetty: < 5.1.6 → fixed in 5.1.6

Description

Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (`%5C`) characters. NOTE: this might be the same issue as CVE-2006-2758.

Related

Alias · CVE (1)

  • CVE-2005-3747 Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References