Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.mortbay.jetty:jetty(Maven) | 6.1.5 | 6.1.7 | N/A |
CVSS Metrics