Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7776
HistoryNov 13, 2018 - 7:08 a.m.

Directory Traversal

2018-11-1307:08:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.004 Low

EPSS

Percentile

75.1%

jetty is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of sanitization of values in the file path, allowing %2e%2e%5c to be interpreted as ../, hence serving the requested files and causing directory traversal attacks.

CPENameOperatorVersion
jetty serverle6.0.0
jetty serverle6.0.0beta3

0.004 Low

EPSS

Percentile

75.1%

Related for VERACODE:7776