CVE-2005-3747
EPSS 19.4%Mortbay Jetty Discloses JSP Source Code
Published: 5/1/2022Modified: 11/28/2024
Description
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (`%5C`) characters. NOTE: this might be the same issue as CVE-2006-2758.
Affected packages (1)
- Maven/org.mortbay.jetty:jettyfrom 0, < 5.1.6