GHSA-cwq3-qp8v-w8q3Medium

Mortbay Jetty Discloses JSP Source Code

Published
May 1, 2022
Last Modified
September 18, 2023

🔗 CVE IDs covered (1)

CVE-2005-3747 →

📋 Description

Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (%5C) characters. NOTE: this might be the same issue as CVE-2006-2758.

🎯 Affected products1

  • maven/org.mortbay.jetty:jetty:< 5.1.6

🔗 References (5)