Lucene search

K
githubGitHub Advisory DatabaseGHSA-QMGJ-5H75-JR67
HistoryMay 01, 2022 - 7:02 a.m.

Jetty Directory Traversal Vulnerability

2022-05-0107:02:10
CWE-22
GitHub Advisory Database
github.com
14
jetty
directory traversal
remote attackers
arbitrary files

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.011

Percentile

84.6%

Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.

Affected configurations

Vulners
Node
org.mortbay.jettyjettyRange6.0.beta16
VendorProductVersionCPE
org.mortbay.jettyjetty*cpe:2.3:a:org.mortbay.jetty:jetty:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.011

Percentile

84.6%