CVE-2006-2759
Improper Input Validation in Mortbay Jetty
Résumé
Improper Input Validation in Mortbay Jetty
Description d'origine
La description telle que publiée par la source (souvent en anglais).
jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Maven
org.mortbay.jetty:jetty
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web eclipse.org