GHSA-4jjw-xrr6-9v3pMedium

Mortbay Jetty Double Slash URI Information Disclosure Vulnerability

Published
May 1, 2022
Last Modified
August 22, 2023

🔗 CVE IDs covered (1)

CVE-2007-6672 →

📋 Description

Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple / (slash) characters in the URI.

🎯 Affected products1

  • maven/org.mortbay.jetty:jetty:>= 6.1.5, <= 6.1.6

🔗 References (6)