jetty-project/codehaus-jetty6 · Security
Jetty Directory Traversal Vulnerability
- GHSA ID
- GHSA-qmgj-5h75-jr67
- CVE ID
- CVE-2006-2758
- Severity
- medium
- Published
- Updated
Description
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.
CWEs
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')