| Package | Affected versions | Patched versions |
|---|---|---|
| org.mortbay.jetty:jetty | < 5.1.6 | 5.1.6 |
| jetty | = 1.0= 1.0.1= 1.1= 1.1.1= 1.2.0= 1.3.0= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 2.0= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.1.0= 2.1.1= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.6= 2.1.7= 2.1.b0= 2.1.b1= 2.2= 2.2.0= 2.2.1= 2.2.2= 2.2.3= 2.2.4= 2.2.5= 2.2.6= 2.2.7= 2.2.8= 2.3.0= 2.3.0a= 2.3.1= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.4.6= 2.4.7= 2.4.8= 2.4.9= 3.0= 3.0.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.a0= 3.0.a1= 3.0.a2= 3.0.a3= 3.0.a4= 3.0.a5= 3.0.a6= 3.0.a7= 3.0.a8= 3.0.a9= 3.0.a90= 3.0.a91= 3.0.a92= 3.0.a93= 3.0.a94= 3.0.a95= 3.0.a96= 3.0.a97= 3.0.a98= 3.0.a99= 3.0.b01= 3.0.b02= 3.0.b03= 3.0.b04= 3.0.b05= 3.1= 3.1.0= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5= 3.1.6= 3.1.7 |
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (%5C) characters. NOTE: this might be the same issue as CVE-2006-2758.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free= 3.1.8= 3.1.9= 4.0= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.b0= 4.0.b1= 4.0.b2= 4.0.d0= 4.0.d1= 4.0.d2= 4.0.d3= 4.0.d4= 4.1.0= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.b0= 4.1.b1= 4.1.d0= 4.1.d1= 4.1.d2= 4.2= 4.2.0= 4.2.1= 4.2.10= 4.2.11= 4.2.12= 4.2.14= 4.2.15= 4.2.16= 4.2.17= 4.2.18= 4.2.19= 4.2.2= 4.2.20= 4.2.21= 4.2.22= 4.2.23= 4.2.24= 4.2.25= 4.2.26= 4.2.27= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.2.8_01= 4.2.9= 5.0= 5.0.0= 5.1= 5.1.0= 5.1.1= 5.1.11= 5.1.2= 5.1.3= 5.1.4= 5.1.5≤ 5.1.5