CVE-2009-1523

medium · 5

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

CVSS

25.8%

EPSS (exploit prob.)

98th

EPSS percentile

2009-05-05

Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
mortbay	jetty	<= 6.1.16
mortbay	jetty	<= 7.0.0
mortbay	jetty	1.0
mortbay	jetty	1.0.1
mortbay	jetty	1.1
mortbay	jetty	1.1.1
mortbay	jetty	1.2.0
mortbay	jetty	1.3.0
mortbay	jetty	1.3.1
mortbay	jetty	1.3.2
mortbay	jetty	1.3.3
mortbay	jetty	1.3.4
mortbay	jetty	1.3.5
mortbay	jetty	2.0
mortbay	jetty	2.0
mortbay	jetty	2.0
mortbay	jetty	2.0
mortbay	jetty	2.0.0
mortbay	jetty	2.0.1
mortbay	jetty	2.0.2
mortbay	jetty	2.0.3
mortbay	jetty	2.0.4
mortbay	jetty	2.0.5
mortbay	jetty	2.1.0
mortbay	jetty	2.1.1
mortbay	jetty	2.1.2
mortbay	jetty	2.1.3
mortbay	jetty	2.1.4
mortbay	jetty	2.1.5
mortbay	jetty	2.1.6
mortbay	jetty	2.1.7
mortbay	jetty	2.1.b0
mortbay	jetty	2.1.b1
mortbay	jetty	2.2
mortbay	jetty	2.2
mortbay	jetty	2.2
mortbay	jetty	2.2
mortbay	jetty	2.2
mortbay	jetty	2.2
mortbay	jetty	2.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-1523