Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.mortbay.jetty/jetty@6.1.6
purl pkg:maven/org.mortbay.jetty/jetty@6.1.6
Tags Ghost
Next non-vulnerable version 6.1.23
Latest non-vulnerable version 6.1.23
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-4jjw-xrr6-9v3p
Aliases:
CVE-2007-6672
Mortbay Jetty Double Slash URI Information Disclosure Vulnerability Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-fvh3-4v5r-cvvc
Improper Authentication in Mortbay Jetty Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, … CVE-2007-5614
GHSA-8h77-9vh5-hw5g
Mortbay Jetty vulnerable to Cross-site scripting Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote … CVE-2007-5613