CVE-2006-2759
Improper Input Validation in Mortbay Jetty
Summary
Improper Input Validation in Mortbay Jetty
Original description
The description as published by the source.
jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Maven
org.mortbay.jetty:jetty
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web eclipse.org