{"action":"Upgrade org.mortbay.jetty:jetty to 6.1.17 (6.x) or 7.0.0.M2 (7.x) or later.","affected":[{"fixed":"6.1.17","introduced":"0"},{"fixed":"7.0.0.M2","introduced":"7.0.0.M0"}],"component":"org.mortbay.jetty:jetty","cve_ids":["CVE-2009-1523"],"ecosystem":"Maven","epss":0.25802,"exploited":false,"fixed_versions":["6.1.17","7.0.0.M2"],"ghsa_id":"GHSA-9986-w5h5-vw59","id":"tcs_01M5N8PM46DRBS4P1KD34AT4ZS","modified_at":"2026-09-10T03:49:32.387689640Z","published_at":"2022-05-02T03:26:04Z","references":["https://osv.dev/vulnerability/GHSA-9986-w5h5-vw59","https://nvd.nist.gov/vuln/detail/CVE-2009-1523","https://bugzilla.redhat.com/show_bug.cgi?id=499867","https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01257.html","https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01259.html","https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01262.html","http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388","http://jira.codehaus.org/browse/JETTY-1004","http://www.kb.cert.org/vuls/id/402580","http://www.kb.cert.org/vuls/id/CRDY-7RKQCY","http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","http://www.securityfocus.com/bid/34800","http://www.securityfocus.com/bid/35675","http://www.securitytracker.com/id?1022563","http://www.vupen.com/english/advisories/2009/1900","http://www.vupen.com/english/advisories/2010/1792"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9986-w5h5-vw59","url":"https://osv.dev/vulnerability/GHSA-9986-w5h5-vw59"}],"summary":"Directory traversal in Mort Bay Jetty"}