CVE-2005-3747

描述

Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (`%5C`) characters. NOTE: this might be the same issue as CVE-2006-2758.

如何修補 CVE-2005-3747

要修補 CVE-2005-3747,請將受影響套件升級到下列已修補版本。

• Maven/org.mortbay.jetty:jetty—升級至 5.1.6 或更新版本

CVE-2005-3747 正在被利用嗎?

低 — EPSS 為 4.4%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 5.1.6

參考連結(4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2005-3747
• WEBsourceforge.net/project/shownotes.php?release_id=372086&group_id=7322
• WEBwww.securityfocus.com/archive/1/450315/100/0/threaded
• WEBwww.securityfocus.com/bid/15515