What is GHSA-qmgj-5h75-jr67?

GHSA-qmgj-5h75-jr67 is a security advisory published by GitHub Security Advisories with Medium severity. Jetty Directory Traversal Vulnerability

Which CVE IDs does GHSA-qmgj-5h75-jr67 cover?

GHSA-qmgj-5h75-jr67 covers the following CVE IDs: CVE-2006-2758. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-qmgj-5h75-jr67?

GHSA-qmgj-5h75-jr67 affects 1 product, including: maven/org.mortbay.jetty:jetty:\u003c= 6.0.beta16.

GHSA-qmgj-5h75-jr67Medium

Jetty Directory Traversal Vulnerability

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

February 12, 2024

🔗 CVE IDs covered (1)

CVE-2006-2758 →

📋 Description

Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.

🎯 Affected products1

maven/org.mortbay.jetty:jetty:<= 6.0.beta16

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2006-2758
https://web.archive.org/web/20200302050157/http://securitytracker.com/id?1016168
https://github.com/advisories/GHSA-qmgj-5h75-jr67