Improper Input Validation in Mortbay Jetty

MÉDIO 5.0CVE-2006-2759 · GHSA-mq4x-8whh-jx73 · Published 02/06/2006 · updated 16/06/2026

Em resumo

CVE-2006-2759 é uma vulnerabilidade MÉDIO (CVSS 5.0) que afeta org.mortbay.jetty:jetty, jetty (jetty).
Chance de exploração nos próximos 30 dias (EPSS): 1.4%, maior que 71.5% das vulnerabilidades.
Correção: atualize para 6.0.0 ou posterior.

Package	Affected versions	Patched versions
org.mortbay.jetty:jetty Maven	`< 6.0.0`	`6.0.0`
jetty jetty	`= 6.0_beta_16`	No fix yet

Description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

NVD description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

References

nvd.nist.gov/vuln/detail/CVE-2006-2759 · ADVISORY
eclipse/jetty.project · PACKAGE
eclipse.org/jetty/about.php · WEB
securitytracker.com/id · Exploit

Mais vulnerabilidades de org.mortbay.jetty:jetty

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.mortbay.jetty:jetty

Maven

< 6.0.0

6.0.0

jetty

= 6.0_beta_16

No fix yet

Description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

NVD description

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

Mais vulnerabilidades de org.mortbay.jetty:jetty

Ver tudo →