Mortbay Jetty CRLF Injection Vulnerability

MEDIUM 5.0CVE-2007-5615 · GHSA-966r-962g-2jq5 · Published 05/12/2007 · updated 16/06/2026

In short

CVE-2007-5615 is a MEDIUM (CVSS 5.0) vulnerability affecting org.mortbay.jetty:jetty, jetty (mortbay jetty).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.5% of all vulnerabilities.
Fix: update to 6.1.6rc0 or later.

Package	Affected versions	Patched versions
org.mortbay.jetty:jetty Maven	`< 6.1.6rc0`	`6.1.6rc0`
jetty mortbay_jetty	`≤ 6.1.6rc0`	No fix yet

Description

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

NVD description

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

References

More vulnerabilities in org.mortbay.jetty:jetty

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free