{"action":"Upgrade org.mortbay.jetty:jetty to 6.1.6rc0 or later.","affected":[{"fixed":"6.1.6rc0","introduced":"0"}],"component":"org.mortbay.jetty:jetty","cve_ids":["CVE-2007-5615"],"ecosystem":"Maven","epss":0.03597,"exploited":false,"fixed_versions":["6.1.6rc0"],"ghsa_id":"GHSA-966r-962g-2jq5","id":"tcs_01M5N8PA2MPZHKVEFCFHGF2FJ3","modified_at":"2024-12-03T06:26:22.232759Z","published_at":"2022-05-01T18:35:01Z","references":["https://osv.dev/vulnerability/GHSA-966r-962g-2jq5","https://nvd.nist.gov/vuln/detail/CVE-2007-5615","https://github.com/jetty-project/codehaus-jetty6/commit/0d2592ea3183914163d0921e4855bd3e18582a05","https://web.archive.org/web/20071007232422/http://svn.codehaus.org:80/jetty/jetty/trunk/VERSION.txt","https://web.archive.org/web/20150112202621/http://www.securityfocus.com/bid/26696","https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00227.html","https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html","http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","http://www.kb.cert.org/vuls/id/212984"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-966r-962g-2jq5","url":"https://osv.dev/vulnerability/GHSA-966r-962g-2jq5"}],"summary":"Mortbay Jetty CRLF Injection Vulnerability"}