Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.mortbay.jetty/jetty@6.1H.22
purl pkg:maven/org.mortbay.jetty/jetty@6.1H.22
Next non-vulnerable version 6.1.23
Latest non-vulnerable version 6.1.23
Risk score 9.6
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-966r-962g-2jq5
Aliases:
CVE-2007-5615
Mortbay Jetty CRLF Injection Vulnerability CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP … There are no reported fixed by versions.
GHSA-6jxp-7g74-2rc3
Aliases:
CVE-2009-4611
Improper input validation in Mort Bay Jetty Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing …
6.1.23
Not vulnerable
GHSA-fvh3-4v5r-cvvc
Aliases:
CVE-2007-5614
Improper Authentication in Mortbay Jetty Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, … There are no reported fixed by versions.
GHSA-9986-w5h5-vw59
Aliases:
CVE-2009-1523
Directory traversal in Mort Bay Jetty Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before …
6.1.17
Vulnerable
GHSA-8h77-9vh5-hw5g
Aliases:
CVE-2007-5613
Mortbay Jetty vulnerable to Cross-site scripting Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote … There are no reported fixed by versions.
This package is not known to fix any advisories.