| Package | Affected versions | Patched versions |
|---|---|---|
| jetty http server | ≤ 4.1.0 |
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free