CVE-2002-1178

No fix known EPSS 9%

Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.

Published 2004-09-01 · CVE record · OSV

Products: jetty_http_server