CVE-2009-1523

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

25.80% chance of exploitation in the next 30 days, 98th percentile

Published

2009-05-05

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/36318
• https://www.exploit-db.com/exploits/18138

References

• CVE Record
• NVD entry

Related

• CVE-2009-1519
• CVE-2009-1526
• CVE-2009-1517
• CVE-2009-1527
• CVE-2009-1516
• CVE-2009-1534