CVE-2005-3747
mortbay jetty: no CVSS score yet. EPSS 4.4% chance of exploitation in the next 30 days. Fixed in org.mortbay.jetty:jetty 5.1.6.
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758.
- EPSS
- 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mortbay:jetty
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cwq3-qp8v-w8q3 | Maven | org.mortbay.jetty:jetty | <5.1.6 | 5.1.6 |