Information Disclosure

2018-11-1307:01:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

71.0%

JSON

jetty is vulnerable to information disclosure attacks. The vulnerability exists due to the ability for users to read arbitrary source code of jsp files by specifying a capital P in jsp when requesting a page.

CPENameOperatorVersion
jetty serverle6.0.0beta16
jetty serverle6.0.0

CPE	Name	Operator	Version
	jetty server	le	6.0.0beta16
	jetty server	le	6.0.0

References

securitytracker.com/id?1016168

0.003 Low

EPSS

Percentile

71.0%

JSON

Related for VERACODE:7775