Lucene search
GoogleOSV:GHSA-5MQ8-H82P-WJF2HistoryApr 30, 2022 - 6:21 p.m.
Jetty Javascript Inclusion Vulnerability
2022-04-3018:21:21
Google
osv.dev
4
jetty
javascript
inclusion
vulnerability
cross-site scripting
http request
encoded characters
remote attackers
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
Related
cvelist
cvelist
CVE-2002-1533
2003-03-18 05:00:00
github
github
Jetty Javascript Inclusion Vulnerability
2022-04-30 18:21:21
nvd
nvd
CVE-2002-1533
2003-03-31 05:00:00
cve
cve
CVE-2002-1533
2003-03-31 05:00:00
exploitdb
exploitdb
Jetty 4.1 Servlet Engine - Cross-Site Scripting
2002-09-28 00:00:00