CRLF Injection in Mortbay Jetty Affects Multiple Versions

CVE-2007-5615

What is CVE-2007-5615?

The CRLF injection vulnerability in Mortbay Jetty allows attackers to inject arbitrary HTTP headers, leading to potential HTTP response splitting attacks. This exploit can manipulate the server's response, potentially redirecting users or injecting malicious content into the response stream. Affected versions prior to 6.1.6rc0 remain at risk if not patched. It is crucial for users and administrators to review their Jetty configurations and ensure they are operating on a secure version to mitigate this risk.

References