Description
CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.mortbay.jetty:jetty | < 6.1.6rc0 | 6.1.6rc0 | GHSA-966r-962g-2jq5 |
References
- 42495 vdb-entry
- FEDORA-2008-6141 vendor-advisory
- FEDORA-2008-6164 vendor-advisory
- 30941 third-party-advisory
- SUSE-SR:2009:004 vendor-advisory
- VU#212984 third-party-advisory
- 35143 third-party-advisory
- 27925 third-party-advisory
- http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
- 26696 vdb-entry