System	Score	Found at
cvssv3.1	5.3	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9986-w5h5-vw59/GHSA-9986-w5h5-vw59.json
generic_textual	MODERATE

Reference id	Reference type	URL
		http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388
		http://jira.codehaus.org/browse/JETTY-1004
		https://bugzilla.redhat.com/show_bug.cgi?id=499867
		https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01257.html
		https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01259.html
		https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01262.html
		http://www.kb.cert.org/vuls/id/402580
		http://www.kb.cert.org/vuls/id/CRDY-7RKQCY
		http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
		http://www.securityfocus.com/bid/34800
		http://www.securityfocus.com/bid/35675
		http://www.securitytracker.com/id?1022563
		http://www.vupen.com/english/advisories/2009/1900
		http://www.vupen.com/english/advisories/2010/1792
CVE-2009-1523		https://nvd.nist.gov/vuln/detail/CVE-2009-1523

Data source	Exploit-DB
Date added	Nov. 18, 2011
Description	Jetty Web Server - Directory Traversal
Ransomware campaign use	Known
Source publication date	Nov. 18, 2011
Exploit type	remote
Platform	windows
Source update date	March 10, 2015
Source URL	https://www.securityfocus.com/bid/50723/info

No EPSS data available for this advisory.

Patch URL
There are no known patches.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9986-w5h5-vw59/GHSA-9986-w5h5-vw59.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

There are no SSVC decisions available.