Vulnerabilities

TI-2006-02667 CVE-2006-2759 · GHSA-mq4x-8whh-jx73

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code…

LOW 26

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0135 Published 2006-06-02 Fixed in 6.0.0 CWE-20

TI-2006-02666 CVE-2006-2758 · GHSA-qmgj-5h75-jr67

Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers…

LOW 30

Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04013 Published 2006-06-02 No fix listed CWE-22

TI-2002-01455 CVE-2002-1533 · GHSA-5mq8-h82p-wjf2

Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote…

LOW 31

Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02407 Published 2003-03-18 Fixed in 4.1.1 CWE-80

Vulnerabilities

Filters

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code…

Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers…

Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote…