CVE: CVE-2002-1178

Export to Word

Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.10447
Percentile: 0.92889

CVSS Scoring

CVSS v2 Score: 5.0

Severity:

Affected Products

cpe:2.3:a:jetty:jetty_http_server:*:*:*:*:*:*:*:*

← Back to Home