Eclipse Jetty Cross-Site Scripting Vulnerability (CNVD-2019-42378)

Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . A cross-site scripting vulnerability exists in the JSP Dump and Session Dump Servlets in Eclipse Jetty versions prior to 6.1.22. The vulnerability stems from a lack of proper validation ...