Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-8H77-9VH5-HW5G
HistoryMay 01, 2022 - 6:35 p.m.

Mortbay Jetty vulnerable to Cross-site scripting

2022-05-0118:35:00
CWE-79
GitHub Advisory Database
github.com
14
cross-site scripting
mortbay jetty
vulnerable

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.011

Percentile

85.0%

JSON

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

Affected configurations

Vulners
Node
org.mortbay.jettyjettyRange<6.1.6
VendorProductVersionCPE
org.mortbay.jettyjetty*cpe:2.3:a:org.mortbay.jetty:jetty:*:*:*:*:*:*:*:*

Related

osv 1
nessus 5
redhatcve 1
veracode 1
prion 1
cvelist 1
cve 1
nvd 1
cert 1
openvas 10
fedora 2
freebsd 1
osv
osv
Mortbay Jetty vulnerable to Cross-site scripting
2022-05-01 18:35:00
nessus
nessus
Mort Bay Jetty Dump Servlet (webapps/test/jsp/dump.jsp) XSS
2007-12-05 00:00:00
FreeBSD : jetty -- multiple vulnerabilities (6ae7cef2-a6ae-11dc-95e6-000c29c5647f)
2007-12-11 00:00:00
Fedora 9 : jetty-5.1.14-1jpp.2.fc9 (2008-6141)
2008-07-08 00:00:00
redhatcve
redhatcve
CVE-2007-5613
2019-10-04 21:10:06
veracode
veracode
Cross-Site Scripting (XSS)
2018-11-12 07:10:26
prion
prion
Cross site scripting
2007-12-05 11:46:00
cvelist
cvelist
CVE-2007-5613
2007-12-05 11:00:00
cve
cve
CVE-2007-5613
2007-12-05 11:46:00
nvd
nvd
CVE-2007-5613
2007-12-05 11:46:00
cert
cert
Mortbay Jetty Dump Servlet vulnerable to cross-site scripting
2007-12-04 00:00:00
openvas
openvas
Fedora Update for jetty FEDORA-2008-6141
2009-02-17 00:00:00
Fedora Update for jetty FEDORA-2008-6164
2009-02-17 00:00:00
FreeBSD Ports: jetty
2008-09-04 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: jetty-5.1.14-1jpp.2.fc9
2008-07-06 06:16:00
[SECURITY] Fedora 8 Update: jetty-5.1.14-1jpp.1.fc8
2008-07-06 06:17:49
freebsd
freebsd
jetty -- multiple vulnerabilities
2007-12-05 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.011

Percentile

85.0%

JSON
Related for GHSA-8H77-9VH5-HW5G
osv1nessus5redhatcve1veracode1prion1cvelist1cve1nvd1cert1openvas10fedora2freebsd1