Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2009-05-05 17:30
Updated : 2025-04-09 00:30
NVD link : CVE-2009-1523
Mitre link : CVE-2009-1523
CVE.ORG link : CVE-2009-1523
JSON object : View
Products Affected
mortbay
- jetty
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')