CVE-2009-1523

Mortbay Jetty < 6.1.16 - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Alexey Sintsov · textremotewindows
https://www.exploit-db.com/exploits/36318
exploitdb WRITEUP
remotewindows
https://www.exploit-db.com/exploits/18138

Scores

EPSS 0.1218
EPSS Percentile 93.9%

Details

CWE
CWE-22
Status published
Products (41)
mortbay/jetty 1.0
mortbay/jetty 1.0.1
mortbay/jetty 1.1
mortbay/jetty 1.1.1
mortbay/jetty 1.2.0
mortbay/jetty 1.3.0
mortbay/jetty 1.3.1
mortbay/jetty 1.3.2
mortbay/jetty 1.3.3
mortbay/jetty 1.3.4
... and 31 more
Published May 05, 2009
Tracked Since Feb 18, 2026