CVE-2005-3747
Mortbay Jetty Discloses JSP Source Code
EPSS 19.4%
Description
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (`%5C`) characters. NOTE: this might be the same issue as CVE-2006-2758.
How to fix CVE-2005-3747
To remediate CVE-2005-3747, upgrade the affected package to a fixed version below.
- Maven/org.mortbay.jetty:jetty—upgrade to 5.1.6 or later
Is CVE-2005-3747 being exploited?
Moderate — EPSS is 19.4%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 5.1.6