CVE-2009-4609: Mortbay Jetty

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request to a URI ending in /dump/, as demonstrated by discovering the value of the getPathTranslated variable.

Affected products

• Mortbay Jetty: version 6.0.0 only; version 6.0.1 only; version 6.0.2 only; version 6.1.0 only; version 6.1.1 only; version 6.1.2 only; …

Published 2010-01-13. Last modified 2026-06-16.