CVE-2009-1523: Mortbay Jetty

Medium severity, CVSS 5.0. EPSS: 25.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

Affected products

• Mortbay Jetty: up to and including 6.1.16; up to and including 7.0.0; version 1.0 only; version 1.0.1 only; version 1.1 only; version 1.1.1 only; …

Published 2009-05-05. Last modified 2026-06-16.