Improper Input Validation in Mortbay Jetty

MEDIUM 5.0CVE-2006-2759 · GHSA-mq4x-8whh-jx73 · Published 02/06/2006 · updated 16/06/2026

In short

CVE-2006-2759 is a MEDIUM (CVSS 5.0) vulnerability affecting org.mortbay.jetty:jetty, jetty (jetty).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 71.5% of all vulnerabilities.
Fix: update to 6.0.0 or later.

Package	Affected versions	Patched versions
org.mortbay.jetty:jetty Maven	`< 6.0.0`	`6.0.0`
jetty jetty	`= 6.0_beta_16`	No fix yet

Description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

NVD description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

References

nvd.nist.gov/vuln/detail/CVE-2006-2759 · ADVISORY
eclipse/jetty.project · PACKAGE
eclipse.org/jetty/about.php · WEB
securitytracker.com/id · Exploit

More vulnerabilities in org.mortbay.jetty:jetty

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.mortbay.jetty:jetty

Maven

< 6.0.0

6.0.0

jetty

= 6.0_beta_16

No fix yet

Description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

NVD description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

More vulnerabilities in org.mortbay.jetty:jetty

See all →