CVE-2005-3747: Mortbay Jetty

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758.

Affected products

• Mortbay Jetty: up to and including 5.1.5; version 1.0 only; version 1.0.1 only; version 1.1 only; version 1.1.1 only; version 1.2.0 only; …

Published 2005-11-22. Last modified 2026-06-16.