1. Home
  2. Vulnerabilities
  3. CVE-2007-6672

CVE-2007-6672

CVSS v2.0 5 (Medium)
50% Progress
EPSS 1.24 % (86th)
1.24% Progress
Affected Products 1
Advisories 3
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software Tools, Exploits & PoC Graph Web & Social Timeline

Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.

Weaknesses
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2008-01-08 11:46:00
(16 years ago)
Updated Date
2012-10-30 03:04:39
(12 years ago)

Affected Products

Mortbay Jetty

Configuration #1

    CPE23 From Up To
  Mortbay Jetty Jetty 6.1.5 cpe:2.3:a:mortbay_jetty:jetty:6.1.5
  Mortbay Jetty Jetty 6.1.6 cpe:2.3:a:mortbay_jetty:jetty:6.1.6