Improper Input Validation in Mortbay Jetty

MEDIO 5.0CVE-2006-2759 · GHSA-mq4x-8whh-jx73 · Published 02/06/2006 · updated 16/06/2026

En resumen

CVE-2006-2759 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a org.mortbay.jetty:jetty, jetty (jetty).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 71.5% de las vulnerabilidades.
Solución: actualizar a 6.0.0 o posterior.

Package	Affected versions	Patched versions
org.mortbay.jetty:jetty Maven	`< 6.0.0`	`6.0.0`
jetty jetty	`= 6.0_beta_16`	No fix yet

Description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

NVD description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

References

nvd.nist.gov/vuln/detail/CVE-2006-2759 · ADVISORY
eclipse/jetty.project · PACKAGE
eclipse.org/jetty/about.php · WEB
securitytracker.com/id · Exploit

Más vulnerabilidades de org.mortbay.jetty:jetty

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.mortbay.jetty:jetty

Maven

< 6.0.0

6.0.0

jetty

= 6.0_beta_16

No fix yet

Description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

NVD description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

Más vulnerabilidades de org.mortbay.jetty:jetty

Ver todo →