CVE-2002-1178
jetty jetty http server: no CVSS score yet. EPSS 9.5% chance of exploitation in the next 30 days.
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.
- EPSS
- 9.5% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jetty:jetty_http_server