Mortbay Jetty CRLF Injection Vulnerability

MÉDIO 5.0CVE-2007-5615 · GHSA-966r-962g-2jq5 · Published 05/12/2007 · updated 16/06/2026

Em resumo

CVE-2007-5615 é uma vulnerabilidade MÉDIO (CVSS 5.0) que afeta org.mortbay.jetty:jetty, jetty (mortbay jetty).
Chance de exploração nos próximos 30 dias (EPSS): 3.6%, maior que 89.5% das vulnerabilidades.
Correção: atualize para 6.1.6rc0 ou posterior.

Package	Affected versions	Patched versions
org.mortbay.jetty:jetty Maven	`< 6.1.6rc0`	`6.1.6rc0`
jetty mortbay_jetty	`≤ 6.1.6rc0`	No fix yet

Description

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

NVD description

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

References

Mais vulnerabilidades de org.mortbay.jetty:jetty

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free