CVE-2009-1523
Mortbay Jetty < 6.1.16 - Path Traversal
Title source: ruleDescription
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Alexey Sintsov · textremotewindows
https://www.exploit-db.com/exploits/36318
References (19)
Scores
EPSS
0.1218
EPSS Percentile
93.9%
Details
CWE
CWE-22
Status
published
Products (41)
mortbay/jetty
1.0
mortbay/jetty
1.0.1
mortbay/jetty
1.1
mortbay/jetty
1.1.1
mortbay/jetty
1.2.0
mortbay/jetty
1.3.0
mortbay/jetty
1.3.1
mortbay/jetty
1.3.2
mortbay/jetty
1.3.3
mortbay/jetty
1.3.4
... and 31 more
Published
May 05, 2009
Tracked Since
Feb 18, 2026