Improper Input Validation in Mortbay Jetty

보통 5.0CVE-2006-2759 · GHSA-mq4x-8whh-jx73 · Published 02/06/2006 · updated 16/06/2026

요약

CVE-2006-2759은(는) org.mortbay.jetty:jetty, jetty (jetty)에 영향을 주는 보통 (CVSS 5.0) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.4%, 전체 취약점의 71.5%보다 높음.
조치: 6.0.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
org.mortbay.jetty:jetty Maven	`< 6.0.0`	`6.0.0`
jetty jetty	`= 6.0_beta_16`	No fix yet

Description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

NVD description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

References

nvd.nist.gov/vuln/detail/CVE-2006-2759 · ADVISORY
eclipse/jetty.project · PACKAGE
eclipse.org/jetty/about.php · WEB
securitytracker.com/id · Exploit

org.mortbay.jetty:jetty의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.mortbay.jetty:jetty

Maven

< 6.0.0

6.0.0

jetty

= 6.0_beta_16

No fix yet

Description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

NVD description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

org.mortbay.jetty:jetty의 다른 취약점

모두 보기 →