Mortbay Jetty CRLF Injection Vulnerability

中危 5.0CVE-2007-5615 · GHSA-966r-962g-2jq5 · Published 05/12/2007 · updated 16/06/2026

要点

CVE-2007-5615 是影响 org.mortbay.jetty:jetty, jetty (mortbay jetty) 的中危 (CVSS 5.0)漏洞。
未来 30 天内被利用的概率（EPSS）：3.6%，高于 89.5% 的漏洞。
修复：升级到 6.1.6rc0 或更高版本。

Package	Affected versions	Patched versions
org.mortbay.jetty:jetty Maven	`< 6.1.6rc0`	`6.1.6rc0`
jetty mortbay_jetty	`≤ 6.1.6rc0`	No fix yet

Description

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

NVD description

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

References

org.mortbay.jetty:jetty 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free