Mort Bay · Mort Bay Jetty · CVE-2009-1523
Name of the Vulnerable Software and Affected Versions:
Mort Bay Jetty versions 5.1.14, 6.x through 6.1.16, 7.x through 7.0.0.M2
Description:
The issue allows remote attackers to access arbitrary files via directory traversal sequences in the URI. This is a result of a directory traversal vulnerability in the HTTP server.
Recommendations:
For Mort Bay Jetty version 5.1.14, update to a version later than 5.1.14 to resolve the issue.
For Mort Bay Jetty versions 6.x through 6.1.16, update to version 6.1.17 or later.
For Mort Bay Jetty versions 7.x through 7.0.0.M2, update to a version later than 7.0.0.M2.