CVE-2007-6672: Mortbay Jetty Jetty

Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days.

Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.

Affected products

• Mortbay Jetty Jetty: version 6.1.5 only; version 6.1.6 only

Published 2008-01-08. Last modified 2026-06-16.